40f017124076a422ca7513e1fdb33af6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40f017124076a422ca7513e1fdb33af6
Size

12KB
MD5

40f017124076a422ca7513e1fdb33af6
SHA1

e4d94115277e1c79d9e43ab4b6098a0dca811648
SHA256

9d150d5411963fff3c763d65c9b7a67165df8a6aadf9a00fa608c8990e5848bf
SHA512

4dac6c1d8526a8a95de9b9eb54a7c09876b326b4d72474a0e3e5ba72291e6821b5645875dffbd5b5dc08ca70c8aace15617e35897ece4a105a50d0aeeba7fe62
SSDEEP

192:LOhUMn9WYL8nLGNW2tmcJdcZhVqu7vuVTgYP+XpUBHY:KUaWYL8nLGNWOzJSZh0ubJZU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40f017124076a422ca7513e1fdb33af6

Files

40f017124076a422ca7513e1fdb33af6
.exe windows:5 windows x86 arch:x86

ce92033a96981e8e248a528226d534f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_XcptFilter
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
__p__commode
_c_exit

kernel32

GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE