40e4c083da257bb7c0bc04f7eeef4299 | Triage

Sharing

General

Target

40e4c083da257bb7c0bc04f7eeef4299
Size

120KB
MD5

40e4c083da257bb7c0bc04f7eeef4299
SHA1

16426053b1ad93fa3832b4f083f1bbce8d172992
SHA256

40467bf55d34e7d3b57b18729154072ef2c310446a9814f82533ec004fc9be8d
SHA512

65bcf4d25a0fd984303538ad1a8cdff0f096ab0cfc14e54e4419fa78cc2e1b56b980b8cca55cc63d6b6db97221345d7833519dc1e770a89f05276faf202542e9
SSDEEP

3072:DJq8LGgTkFZ2wn/nVwpuqmWa8b8+vnCwjxZ/tC:D4EdkFoePVxua23nfjPtC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40e4c083da257bb7c0bc04f7eeef4299

Files

40e4c083da257bb7c0bc04f7eeef4299
.dll windows:4 windows x86 arch:x86

d71ff74ccfe699004afc74c243196b27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetFileSecurityA

version

GetFileVersionInfoA

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 566B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ