40b3f18952ac4e53c4a05572cd51c3ff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40b3f18952ac4e53c4a05572cd51c3ff
Size

261KB
MD5

40b3f18952ac4e53c4a05572cd51c3ff
SHA1

358f07055be1d9ec05afa679733f5a112410989d
SHA256

e19aaea81c28506976c18eec46bf67ed8dacfe45753b53c2ed4a9749c1382a22
SHA512

8c9738beb17c3bdc41412d6ed8904aadb615f4fe3c54a18c6085c4d4ab39e4df343d57761adadb8c0ac0f126ac94d9e476ebf86a00b4c926a612523f31fe3742
SSDEEP

6144:9TAuLr0XcRDU6GehCyGgq6KUvMvRyMtN94ouOu03:9b0XWCeIyGg1HvMsgNSoZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40b3f18952ac4e53c4a05572cd51c3ff

Files

40b3f18952ac4e53c4a05572cd51c3ff
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wxyx.0hv
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

zy37az4q
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

549kvy6c
Size: - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nb8hlfq1
Size: 259KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE