40632ef0984f9bcd9dc13d72de9c9f04 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40632ef0984f9bcd9dc13d72de9c9f04
Size

272KB
MD5

40632ef0984f9bcd9dc13d72de9c9f04
SHA1

4be0ad73d1b47b9945fc0630bf175b1350459182
SHA256

3ff7eeff2c7e0372ff8d4ca75f8d933f53ae0abd51a1358db33888d7b9a0609f
SHA512

e1d3004f61b89ba6c0c6f5425d5f5c23e95d04c1e13eab699bc3ea4d4c2ec40e30ab28672c575556a8a6db35c28ade55d1fe514b4a8d03323aa1e1399d0ee317
SSDEEP

6144:8hKio2S7+3Q4K4dvIAX55iSqwQsv73P6R+vIA6MFmB1Fw+4sfX:kg+3Q8hX7ce76QvIJMKwlsfX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40632ef0984f9bcd9dc13d72de9c9f04

Files

40632ef0984f9bcd9dc13d72de9c9f04
.exe windows:5 windows x86 arch:x86

eb87fe4caf1ead7a00ed43159f7048da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetActiveWindow
EnumChildWindows
SetWindowTextA
IsCharAlphaA
DialogBoxParamA
SetWindowLongA
MoveWindow
GetDesktopWindow

ole32

CoRevokeClassObject

comctl32

InitCommonControlsEx

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

kernel32

GetTickCount
LoadResource
IsBadStringPtrA
InitializeCriticalSection
GetTimeZoneInformation
HeapDestroy
GetStartupInfoA
FindResourceExA
ExitProcess
GetDateFormatA
GetProcAddress
FreeLibrary
LoadLibraryA
LocalFree
HeapCreate
ResumeThread
LocalAlloc
DeleteCriticalSection

Sections

.text
Size: 262KB - Virtual size: 261KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ