40e814a8f7e4503f212beacc531f2e89 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40e814a8f7e4503f212beacc531f2e89
Size

406KB
MD5

40e814a8f7e4503f212beacc531f2e89
SHA1

4e34379f2a91961e3528993198d813a689b47f08
SHA256

6830d9a15fcaed0f82d267c1c61708b53ae9f2adf8bdd2556414965a84e1f665
SHA512

8aceb7d915c596f34c90fde5acce1c92859f56411b149da1539253b74621ab75c725f77d56001cec50a1171a7bd51d5bfaac322b7c80b746c7cc4d20ff175200
SSDEEP

12288:5yQG7RnSLD6U2Ybbe6UgyzMoCfirdO4H:8P7RSLOU2Ybb4zgofX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40e814a8f7e4503f212beacc531f2e89

Files

40e814a8f7e4503f212beacc531f2e89
.exe windows:4 windows x86 arch:x86

e38b8a328447f307958629592a099709

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushInstructionCache
TerminateProcess
GetProcessShutdownParameters
WaitNamedPipeW
GetProcAddress
VirtualAlloc
HeapReAlloc
SetConsoleTitleW
GetEnvironmentVariableW
GetSystemTimeAsFileTime
GetCurrentProcessId
HeapAlloc
HeapCreate
GetCurrentThreadId
GetCurrentProcess
GetModuleHandleA
FindResourceA
GlobalGetAtomNameW
WriteConsoleW
InterlockedExchange
RtlUnwind
lstrlen
QueryPerformanceCounter
VirtualQuery
LocalShrink
GetConsoleMode
MapViewOfFileEx
MoveFileA
LocalReAlloc
ExitProcess
GetTickCount
SetConsoleCtrlHandler
FindAtomA
HeapFree
LoadLibraryA
GetModuleFileNameA
EnumSystemLocalesW

comdlg32

ReplaceTextW
GetSaveFileNameA
GetFileTitleA
GetFileTitleW
LoadAlterBitmap
ReplaceTextA
ChooseFontW
PrintDlgA
FindTextA
PrintDlgW
PageSetupDlgW
GetOpenFileNameA
ChooseColorA

Sections

.text
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ