40ce967ca0f1d7c600ef82f0da195e23 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40ce967ca0f1d7c600ef82f0da195e23
Size

147KB
MD5

40ce967ca0f1d7c600ef82f0da195e23
SHA1

7e468a9cb748a5280b63cc0f6b22895e1158c859
SHA256

30df31da83eca21c2aa5beafe4447164b65280d6c57cc294ff6c5b4dee00d462
SHA512

f6bd9ad03e51fc44cb005c18057f57f1da9431afa85a085461bc78e987b0f18775353cca75ed92c36ce9fb2175d5171ba99c4faa50c0c0cc104f2d04c8042279
SSDEEP

3072:HVxMAmeBZ7kb4PUNAA5a2t/VG8Ny865wc8SRH710sVL3X:1KCBV9EAA42tM8k8zoH7WW3X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40ce967ca0f1d7c600ef82f0da195e23

Files

40ce967ca0f1d7c600ef82f0da195e23
.exe windows:5 windows x86 arch:x86

e617d841c96e57aa3dc790b08f73d2a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrToIntA
PathStripPathW

kernel32

GetModuleHandleA
lstrcmpA
LoadLibraryExA

Exports

Exports

?ExpandEnvironmentSampleStringsA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ExpandEnvironmentSampleStringsW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesW@567GPAUHINSTANCE__@@U_COMMPROP@@?F

Sections

.bss
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.itext
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ