40db2f3c4886dbe6d483120d344acd2f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40db2f3c4886dbe6d483120d344acd2f
Size

900KB
MD5

40db2f3c4886dbe6d483120d344acd2f
SHA1

eb46a58cfbc5666b98490b3b4c8f0cf5cc0a60ec
SHA256

e401a1d544cee2c12987c43d5a5c717fb00a1560236f33a22e521690537fbebb
SHA512

3a1d087dead1e9fee335c1afe35d9f0555c68710e8a725c25c9dde16085c1f28d60e0f22315a99165d522d321ab00fcb2721831e3343924c48d44c488fbe241a
SSDEEP

12288:CFczmlbmVl5vOuJDMibF6HjDcFzMD0cM19QbKvK2kQQDpkM3CiEWAj3Mjr02MvTA:CCylc2uJDZF6HEForM19bSfpkDduwVy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40db2f3c4886dbe6d483120d344acd2f

Files

40db2f3c4886dbe6d483120d344acd2f
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 557KB - Virtual size: 557KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ