40b3a11cd3d2a039dd1c305df1092be8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40b3a11cd3d2a039dd1c305df1092be8
Size

115KB
MD5

40b3a11cd3d2a039dd1c305df1092be8
SHA1

cd378f9370b3d0f5aa3ff66b5f53857be26c2a32
SHA256

2c220e0bef210516d8f63fcac9ef60e383c055119ca8a40d1d5e033d45627aa8
SHA512

9d22a7f855debb9d2ee907fa2a8902e23d7121c64ade4faccdefb3f85a895f91f89bb22ed3c78c82c0178482d4163c49844cf6bc64a0c4fb8dac746822e09df4
SSDEEP

3072:NXPLj2BAh25NbVceIyAhMZtdC+dC99FuBJ6H0U9yEFMJ:BPH2n5d2eIt6vdC+C99cBJY9AJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40b3a11cd3d2a039dd1c305df1092be8

Files

40b3a11cd3d2a039dd1c305df1092be8
.exe windows:4 windows x86 arch:x86

697b4d1e6261c7b13dc08c16e525b493

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
SetSystemTimeAdjustment
VerifyVersionInfoA
WritePrivateProfileSectionA
GetConsoleOutputCP
GetTempPathW
ReleaseSemaphore
OpenEventW
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE