40d24397572d391bd0542f81339ad793 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40d24397572d391bd0542f81339ad793
Size

138KB
MD5

40d24397572d391bd0542f81339ad793
SHA1

9f1d7dbfae274f7ac6d22eb1e17e3517d1a2ede0
SHA256

c7c7d6850b1f9ecfd7cd7d2f237bbb27695d99c55bf01bf3d5948fdf8bd113c8
SHA512

4faa6aac1f37d5ae42df0e2e0cec75674cee06c1d71edbfc8f28807e914ba8880c747148f4a2aa540f1de9b031366423eb1043e000b2eeeb0f08d09a38cb412c
SSDEEP

3072:8SAEpOg6vXhIssy3/LmyOkQafVuKH4GbMBEm5nW:81EpOg6/Ky/LmAQtKH4GbmnW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40d24397572d391bd0542f81339ad793

Files

40d24397572d391bd0542f81339ad793
.exe windows:4 windows x86 arch:x86

13efeaa7cb199aceab733b8b09fb3052

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisableThreadLibraryCalls
DeleteFileA
GetCurrentThread
ResumeThread
GlobalDeleteAtom
GetFileAttributesA
GetTempPathA
EnumResourceNamesW
ExitProcess
VirtualQueryEx
lstrcpyA
SetPriorityClass
OutputDebugStringA

shell32

SHGetSpecialFolderPathW
ShellExecuteExW

oleacc

LresultFromObject

ole32

StgOpenStorage
CoUninitialize
CoCreateInstance
CoFileTimeNow
CoInitialize

Sections

.text
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ