40a8595f278855827fc125e3e2dcfeca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40a8595f278855827fc125e3e2dcfeca
Size

22KB
MD5

40a8595f278855827fc125e3e2dcfeca
SHA1

e7cd714b11c8e75dc7da6fb5a4c6a698cbbbf0ea
SHA256

f576cb8b73ccb9f6eb72f4b18b75fbf38e12c570a8737082564533183296f367
SHA512

46830d14c173b37007aae1d735d402ab6a84ff9f897a545984fca3291265e9dad0197bc7d8f7438aa2488369f7554f1f28f7673a8a70c57c3c4ab111278cf492
SSDEEP

384:FZOJGd3Cf+5N0BaZMm34YBcgMMMI7iYZW94x:4GCg0gZMm3BMMMIO/+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40a8595f278855827fc125e3e2dcfeca

Files

40a8595f278855827fc125e3e2dcfeca
.exe windows:4 windows x86 arch:x86

a86023318f45c5c2dc42a509cd9290ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
lstrlenA
GetLastError
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
ExitProcess
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
CopyFileA
LoadLibraryA
FreeResource
GetSystemDirectoryA
FindResourceA
SizeofResource
LoadResource
LockResource
GlobalAlloc
CreateFileA
WriteFile
CloseHandle
SetPriorityClass
GetStartupInfoA

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA
StartServiceCtrlDispatcherA
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
CloseServiceHandle
RegisterServiceCtrlHandlerA
SetServiceStatus
RegOpenKeyA
RegSetValueExA
RegCloseKey
RegOpenKeyExA

msvcrt

sprintf
strstr
strncmp
_except_handler3
exit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

Sections

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ