40c4b11105db1386e30bc870183a6499 | Triage

Sharing

General

Target

40c4b11105db1386e30bc870183a6499
Size

354KB
MD5

40c4b11105db1386e30bc870183a6499
SHA1

c91b01612d0a67a9200a6f0780d554a5c1e321fd
SHA256

ec93dd2c8432d31d3be69a3538a20fd344090246dd7289a2db829d9048ce9b5e
SHA512

70fb8f93c6c48cd890990ccb3a8ae85851ba44e94c294cf4aa1760bcdc20daae3e77ad381fbb699e1eb473223643d518f0c47a8955d9f1d700ace5128a575c59
SSDEEP

6144:I2pRrUqddTQZokHv1rQJvnRIAYjY35AiZkpoks5UF1Sf5jGPW2LdMgDbq6nk1/3i:IqUudBkP1UJZIIJpkDrF1SoP/dTBk1/3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40c4b11105db1386e30bc870183a6499

Files

40c4b11105db1386e30bc870183a6499
.exe windows:4 windows x86 arch:x86

193ddcac0a7502c98e27a0c863ea47ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
FreeLibrary
GetProcAddress
EnumCalendarInfoA
LoadLibraryW
WideCharToMultiByte
DeleteFileW
GetFileAttributesW
GetTempPathW
GetTempPathA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetFileSize
LockFile
GetModuleHandleA
UnlockFile

oleaut32

SafeArrayDestroyDescriptor
SafeArrayDestroyDescriptor
VarFormatNumber
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

msimg32

TransparentBlt

Sections

.text
Size: 235KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE