40b5f1298c66949ea638e70a67c354e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40b5f1298c66949ea638e70a67c354e8
Size

20KB
MD5

40b5f1298c66949ea638e70a67c354e8
SHA1

3219ec9db27393f844a03ab7a6051bfa6b5ed5c8
SHA256

1d56d721309911f24e70a9fc92ed3a2ecb0f0f2d356fc77f808a3dab8e9e11a7
SHA512

a6682ae0eb347186aab5af081dd7dfbb1ec4426829ecacd2611e85225b4cd9b3d102b3da24dac3a910ea48c304b24ccffc552baf9a8c6586ce2124ff1c0ed0b5
SSDEEP

384:S2clPHROrwoQpd3LsKVgf1/GfVj5k1I1lntdNfj8Gs2Maih/l:oxuw53GJGfVj5kCFRfMNH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40b5f1298c66949ea638e70a67c354e8

Files

40b5f1298c66949ea638e70a67c354e8
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 326KB - Virtual size: 844KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ