40b0a0d5c742264cefde21ec93622ba2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40b0a0d5c742264cefde21ec93622ba2
Size

62KB
MD5

40b0a0d5c742264cefde21ec93622ba2
SHA1

23a2d0317bfee721b818ac8839d8a1f01e56947a
SHA256

33cdfc105307f8f044904b97fd372a5ea875f8088bac082b4174412ef1b36330
SHA512

9217bff1d93dfe707bf2bff09eeff9c3a1d2a0be0e305c0ede77c98ae712ee5088cc859a89c9dcd8ab9369b2d0055f93ac1c61a7527309535a7e7af71591b017
SSDEEP

1536:8jv6s6qLVhL5sbyCGaPHZ3P+0fkoH8MDKhuwjo/Xqe1W0+:+S+LP5E1PHZ/+0vHVKsoo/qe1W0+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40b0a0d5c742264cefde21ec93622ba2

Files

40b0a0d5c742264cefde21ec93622ba2
.exe windows:4 windows x86 arch:x86

ce9021d4a6a4e4466da545620c086240

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleDisplayMode
FindAtomW
SetFileTime
CreateFiberEx
GetFileInformationByHandle
WriteConsoleOutputCharacterW
LZSeek
EndUpdateResourceW
GetFileSizeEx
SetProcessAffinityMask
RestoreLastError

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE