40984e3c1ad881f7038e8c3aad3a9b22 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40984e3c1ad881f7038e8c3aad3a9b22
Size

43KB
MD5

40984e3c1ad881f7038e8c3aad3a9b22
SHA1

0abbf3b5a1a15d819f3235fbde494513451e5408
SHA256

8a0d6c67d7faa8d9a29653b26ada3ec8d189c13f770ed392a2cd62a164f32a6d
SHA512

43115c8c479396a2f096fb5165c84c863be2097984e11de17056b8d39dd7a768d282a964bbcbf3b9bd8c9f4cbe0534a0cc0bdcf385188d89f40497d7f52b2b2e
SSDEEP

768:VwccNH//ESFy3ib6bRh749w/dBnssWaxP+7CfNgw:VwcGE+y3vTOuXW++V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40984e3c1ad881f7038e8c3aad3a9b22

Files

40984e3c1ad881f7038e8c3aad3a9b22
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BindIEBrowser
CoolGetVersion
FireCoolPopup
SendSomethingToHookLib
SetHook
TestPopup

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE