040134de9337ae74c27d0b26c2f572c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

040134de9337ae74c27d0b26c2f572c0
Size

209KB
MD5

040134de9337ae74c27d0b26c2f572c0
SHA1

f89bde75360a827292e9109bfc720148d22aeccf
SHA256

e64d8f96b3411bafdace083f663d33f5ffbd2130ec43a67435e15cf5686f131e
SHA512

e1bae1952d1d6dacb60d9bdd58fe546a6c8a50adf00794a0f05ab10aba5eeb74fca5061b5c412a85f176d56f1f6fffb279f552ff43a3aac358f893dfaaa70097
SSDEEP

3072:rl2/rrPHnWj7W9ydD0wuKQGwLwAaJqAn1n3QnZ5+ZxF5h50vjUzj6bfikWSzEDrm:rl2/rrfP9Jw5wLaj13mQ24Cfikr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
040134de9337ae74c27d0b26c2f572c0

Files

040134de9337ae74c27d0b26c2f572c0
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 204KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE