b40e8909ba2b177d88e92e769cf5c591 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b40e8909ba2b177d88e92e769cf5c591
Size

24KB
MD5

b40e8909ba2b177d88e92e769cf5c591
SHA1

fa6db465f78647d5d8abc43a75a9e1f84b0679a0
SHA256

b971c35cd01b405dfafb3b2cd80dd43a99f81bee4d68ddedc6d2a73b1d1fbf36
SHA512

137399508108324f1762ea8fbe6552b4e53fca2cae93a991cb69ee99d476468d1c24eeb0497e38e46f6455e41cd0626301c125f57e497c792210e5c6c68ac8dd
SSDEEP

192:ERdckbSUp70FzNvMX3G7DshNyXWNtTitE8FG0kFDWnGWp+0FBFjCtLFTN0u:EIkWUVA5MG7YmXWNtdsGXDWnGWc6pq0u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b40e8909ba2b177d88e92e769cf5c591

Files

b40e8909ba2b177d88e92e769cf5c591
.exe windows:5 windows x86 arch:x86

092f456300ef234bfc766e86925fd267

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

FormatMessageA
LocalFree
LocalAlloc
SetConsoleCtrlHandler
Sleep
GetLastError

user32

CharToOemA

icmp

IcmpCreateFile
IcmpSendEcho
IcmpCloseHandle

wsock32

WSAStartup
inet_addr
ioctlsocket
gethostbyname
gethostbyaddr

msvcrt

_write
__p___initenv
isspace
_controlfp
_except_handler3
__set_app_type
strtoul
exit
__p__fmode
_exit
_XcptFilter
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE