40fafc15d456e7ef9f0e030ff0bf16f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40fafc15d456e7ef9f0e030ff0bf16f6
Size

187KB
MD5

40fafc15d456e7ef9f0e030ff0bf16f6
SHA1

ed72559c7d1475bd1ad085d79efd8bf061f7f095
SHA256

3c11c6db25021fdd894f812d21910db262678381d4dde557c64864e2688519f4
SHA512

96cb46d7fe237ec9058f26b86af2bac5d5dfd6304aa8e13bf1dc5cfc74d46f6ee8dc5271f5449f51f8e5d4a972fbaddb0573954ac3c2368956086e0bf71e0659
SSDEEP

3072:J3vXbBr1gUFJx+QsIkEgsDAUUAWgFdbizd0lZdyCe78mI+4U84I6K/:VbJ4PEgYAUUAPTbi507+4Um/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40fafc15d456e7ef9f0e030ff0bf16f6

Files

40fafc15d456e7ef9f0e030ff0bf16f6
.dll windows:5 windows x86 arch:x86

65f1779b686361b65fa2914474ac66e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
EnumResourceTypesA
GetFileInformationByHandle
FlushFileBuffers
WaitForSingleObjectEx
EnumSystemLocalesA
HeapAlloc

shlwapi

PathUnquoteSpacesW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

user32

GetForegroundWindow
MessageBoxW
KillTimer
CheckRadioButton

ntdll

RtlCaptureContext

Exports

Exports

?InsertCustomData@@YGKXZ

Sections

.text
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ