040b4e22a509bdceca48425c314b83544e6bede2b59f4d3919e01ac32aaea556 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

040b4e22a509bdceca48425c314b83544e6bede2b59f4d3919e01ac32aaea556
Size

56KB
MD5

bc8b3d809e17f6a6f5425c0ba9f78a25
SHA1

cb57adf8db50c7312790a0fef6019b37f2f40842
SHA256

040b4e22a509bdceca48425c314b83544e6bede2b59f4d3919e01ac32aaea556
SHA512

ef0eb851df03082c9f83b252d25bf35f3eb31c1d6ea53ab535b24af09b89c30d1b822f70348919aa324f6e55814761b3b45466f22daa09372a312c038948dce0
SSDEEP

768:Ms40V9XKvBULzBgIpnRzQCm2Pf/Vi0a1mdNSam0wfuJUZrY+TNYycwXEW931pd1h:7tZPf/Vi6Nv2++TNYPwj37d12QgPw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
040b4e22a509bdceca48425c314b83544e6bede2b59f4d3919e01ac32aaea556

Files

040b4e22a509bdceca48425c314b83544e6bede2b59f4d3919e01ac32aaea556
.exe windows:4 windows x86 arch:x86

ff6cf7975021a5807e13c314515deb35

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteAtom
EnumResourceTypesW
GetFileTime
DosPathToSessionPathA
OpenFile
SystemTimeToFileTime
FreeUserPhysicalPages
WriteConsoleInputA
ReadDirectoryChangesW
GetVolumePathNameW
RegisterConsoleIME

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE