40c20dc79102ed6f8e50a8d5b14ab3c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40c20dc79102ed6f8e50a8d5b14ab3c9
Size

1.5MB
MD5

40c20dc79102ed6f8e50a8d5b14ab3c9
SHA1

b04841045798435dce830784f6e76f9ef33d15ec
SHA256

ca7f2333edda9541e04197ad8cb65d431aa596dcdb045fe584894826fe25f727
SHA512

966e55c6cab8dddb32762829232c86947edc61e06b2435a92b701850fa7ce49c987c6dd288ce62ba3182594d471db179b343cc01205aa570f72c0174f773cd6b
SSDEEP

24576:e9dG37Vk0R07Qanm9ytoEew3z79ihwtYe6rG8vXttxZijEkvPXyEKUMjysMW6z:lrq0R07QQmstFeuzAh//rhdZiDYmsTA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40c20dc79102ed6f8e50a8d5b14ab3c9

Files

40c20dc79102ed6f8e50a8d5b14ab3c9
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 484KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.0MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

petite
Size: 676B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ