40055ddc42ade1b30daeaf2b24d1c4a8 | Triage

Sharing

General

Target

40055ddc42ade1b30daeaf2b24d1c4a8
Size

227KB
MD5

40055ddc42ade1b30daeaf2b24d1c4a8
SHA1

187e25401494623eb42c7dd19c756cb172033968
SHA256

57ac96e8e775734ced5000c494ba8fe53124b6624200abc7182237bc9c0b9dbd
SHA512

54ba1b14d44ea48b3970fc172da556bdb98b81f329d0ed4d3d41ef04bb9ba4821f7e893f4c80947c3b0ba482c2914c679465c93eb770c5e719488fbbb8820468
SSDEEP

6144:yxEeckygXCad6h1hAUSzUUDGcONNnFZ5Ky:IbygXPd6iBzfG9NNFZ5K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40055ddc42ade1b30daeaf2b24d1c4a8

Files

40055ddc42ade1b30daeaf2b24d1c4a8
.exe windows:4 windows x86 arch:x86

2cf810e8473b328a83ca2e656eecf797

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

ExitProcess
GetPriorityClass
GetSystemDefaultLangID
GetThreadPriorityBoost
ReleaseMutex
UnlockFile

advapi32

ConvertAccessToSecurityDescriptorA
CryptDeriveKey
ObjectCloseAuditAlarmA
RegEnumValueA
SetEntriesInAclA

user32

ClipCursor
CloseDesktop
CreateDialogIndirectParamW
CreateMDIWindowA
EnableMenuItem
ExcludeUpdateRgn
GetKeyboardType
PostMessageW
ReleaseCapture
SetCaretPos
SetDlgItemTextA
SetLogonNotifyWindow
ShowWindow
UnhookWindowsHook

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 223KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ