40589379218e095feff4352f3ed35158 | Triage

Sharing

General

Target

40589379218e095feff4352f3ed35158
Size

358KB
MD5

40589379218e095feff4352f3ed35158
SHA1

e4b05a1a1a377174f11665bd7ba7d474d64951c9
SHA256

142b7b9d97fd7f88e171cb3f7c2480b9a63b5aae42126be986a69bf329c97e6e
SHA512

8bd03198f3cde1aa043d2c461fad8ae6f586f3f252f488df476d509da8b33f18803ada433bb91ec803c49e00f350cff8d9f51263b594e8581bbf66e45b99d3ee
SSDEEP

6144:ZolbwgOcG0ma3q6qhU2/+3sGeAmc3iYUT+hnH/saya:Zolc5cdma3q69D82c+hnfy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40589379218e095feff4352f3ed35158

Files

40589379218e095feff4352f3ed35158
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 200KB - Virtual size: 641KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE