40d385b64b73dd371c4bcffd5c3b4f72 | Triage

Sharing

General

Target

40d385b64b73dd371c4bcffd5c3b4f72
Size

692KB
MD5

40d385b64b73dd371c4bcffd5c3b4f72
SHA1

c811ccac14c19898d18a85a8475e8f560f18a0bc
SHA256

79e04bb6281d503338da1219a61e006bbd3ec815f9dd92fe1737d42bfe80bab4
SHA512

18554ddff575d75d29c571a38a5b07ee40a8c142ae1e6f1f0e201b09957e96eb280397a4c9154c2e1dcda6feab87103dcc2211518559d30c199d6dbdc8d6f6fc
SSDEEP

12288:CiUQFnzTsmkl73T2DuudEKw/gwLGx+HOZR70+oDU5yr7PoKc2Bv7S9WI9:CizdTsmkl7D2DV0OD70nUsrUKbS59

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40d385b64b73dd371c4bcffd5c3b4f72

Files

40d385b64b73dd371c4bcffd5c3b4f72
.exe windows:4 windows x86 arch:x86

629ad41be39f461e18cbe1ca0a03a465

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetCommandLineA
FreeLibrary

user32

GetMessageA
BeginPaint
GetFocus
EndPaint
DispatchMessageA
DefWindowProcA
GetSysColor
SetFocus
ScreenToClient
LoadIconA
ShowWindow
SetWindowTextA
DestroyWindow
CreateWindowExA
GetClientRect

msvcrt

wcschr
_controlfp
__p__commode
_acmdln
memmove
wcslen
_XcptFilter
toupper
_exit
__setusermatherr
__CxxFrameHandler
__getmainargs
rand
__set_app_type

gdi32

CreateFontIndirectA
SetBkMode
SelectObject
GetTextMetricsA
LineTo
SetPixel
GetTextColor
GetTextExtentPoint32A
PatBlt
DeleteObject
CreateCompatibleDC
ExtTextOutA

Sections

.text
Size: 1024B - Virtual size: 943B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 686KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ