a40b8949f0534e873c0b52bfad3c38d1 | Triage

Sharing

General

Target

a40b8949f0534e873c0b52bfad3c38d1
Size

41KB
MD5

a40b8949f0534e873c0b52bfad3c38d1
SHA1

20aa2070f73a5a82b21fc4721800d4524ee5a402
SHA256

e1f4fb3e23c9ffd49574607dc33bbf8ac9fea1db8f1b2c59a4211c7b9377caf1
SHA512

f672d562a208b88b740df50f916cb45044a49d40a0828003ab67f19cb4d4f6bfaf1d641f73d5695f896c5af2e846c2c649a0edc33b909520d26f981f04badc51
SSDEEP

768:j09ojHa6uZgd7IYIxzkIZEuDINXpzo25rOT/Gnkx57dvb+ZMjPoNaPHr7d9r0rw6:j9HCkI9DINXpzo2IrEknW/CPIvICuxy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a40b8949f0534e873c0b52bfad3c38d1

Files

a40b8949f0534e873c0b52bfad3c38d1
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 671KB - Virtual size: 670KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20.3MB - Virtual size: 20.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ