40524211d46795a563808ead034c0ae9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40524211d46795a563808ead034c0ae9
Size

24KB
MD5

40524211d46795a563808ead034c0ae9
SHA1

5b1ea1bd6fabd6fa7228412f0b8408896c4ab4d0
SHA256

5593059ebd2ce7c2912dcfb40fb6b6438da117167a4aaa731283008c428f8c7e
SHA512

5e93d09343cbbc7e75941f9f1f4a4d4e3a8ec1450822787c1705d431608c7cd90c6296c754c038a69386a9eb705dc66df28d8148774f7b348955c5db1ce311de
SSDEEP

192:rzTDvA0KIQgwb9yjUrwfhl4pNCl2JXXNk8zP1oyWv9fZseVnKQ9Z1:Qsi8h52VOu1+Bse9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40524211d46795a563808ead034c0ae9

Files

40524211d46795a563808ead034c0ae9
.exe windows:4 windows x86 arch:x86

891bf83c499949731af228c9f233e3be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateProcessA
WriteFile
CreateFileA
FreeLibrary
GetLongPathNameA
GetTempPathA
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

msvcrt

_except_handler3
sprintf
rand
srand
time
isalpha
isalnum
div
??2@YAPAXI@Z
atoi
__CxxFrameHandler
atol
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??3@YAXPAX@Z
ceil
_itoa

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ