40374c7ba0483a8cb2a08706e86811d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40374c7ba0483a8cb2a08706e86811d0
Size

34KB
MD5

40374c7ba0483a8cb2a08706e86811d0
SHA1

3c8fec8c4ceb824406de505856f0fe37eeadd0d9
SHA256

f3437ce243b74adbd518a227827b98180f613192d1b4b08bd11fabf4a1617636
SHA512

2263b8a80eea785b6fe6c94cd80c8b21d7f7c54f89a22896a35044883a552eccede7d6e49e953119bf3c142e05b13bae5490881a29022703030a2928c5d0994d
SSDEEP

768:p0dD5DyqF6kbEVJ0lXmWB7i2Mn780mC7pawqyIu40j:psD5DIkbq0lm780Xp7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40374c7ba0483a8cb2a08706e86811d0

Files

40374c7ba0483a8cb2a08706e86811d0
.dll windows:4 windows x86 arch:x86

fffcb202d9e33d2b57351616a8958b78

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

hal

KeRaiseIrql
HalDisplayString

ntoskrnl.exe

ZwCreateFile
ZwDeleteFile
MmGetSystemRoutineAddress

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ