40e3c39f5d2116df4656542c4527f55f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40e3c39f5d2116df4656542c4527f55f
Size

97KB
MD5

40e3c39f5d2116df4656542c4527f55f
SHA1

8f177739d3f779c694b8f54257ef907f210d2764
SHA256

4bae83ed3ab3fc97fb9914614ff7332e56a5fc389731ea5676299ffebe41c6e2
SHA512

cfef354d1461861083d8e9094210331617ffec38e17bd24a1421cd4a90e7e7d0e2df41a9e9b56283fcc0a55bb4dcfcabf2e194f70f26a6dc84d9a6b28b179ac5
SSDEEP

1536:Q04uvDehBIm5JdG82l+EabkSuyT8Hv2yrCezfVI4rrnD1DrJ8WbhQN:Q+vDSBIm5JdG85RkzyGfIsTDpJ8WdQN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40e3c39f5d2116df4656542c4527f55f

Files

40e3c39f5d2116df4656542c4527f55f
.exe windows:4 windows x86 arch:x86

cbf47572e8cb446c01bd5522c7d7f827

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameW
UnmapViewOfFile
lstrcpynW
GetFullPathNameW
SetEnvironmentVariableW
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
WideCharToMultiByte
GetEnvironmentVariableW
GetVersion

user32

MessageBoxA

Sections

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 111KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE