c40f63aa2be8d5a29470f2651ad0e973 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c40f63aa2be8d5a29470f2651ad0e973
Size

22KB
MD5

c40f63aa2be8d5a29470f2651ad0e973
SHA1

1b3d03704e835afd1213914f7fb31e83f9996f27
SHA256

f2895d07cb9f904df47e241241d90218ee146f8c63ff21f8e108eb8f1ba6f889
SHA512

fbf88817bb3f9ece605fc501f331d606216d35d9adaa347557f91197e8008f566ca5b97467b5785838cecc07c04794ba72f29bcb6f3ad38584287b2894a0e889
SSDEEP

384:DWERH1+7tV5p1xvWizDI5nesfH0KKSUrI4uQMylcp:z45pP+izDwvfUKuI4uQll8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c40f63aa2be8d5a29470f2651ad0e973

Files

c40f63aa2be8d5a29470f2651ad0e973
.exe windows:1 windows x86 arch:x86

313a383c9ffd446a1d956ebd8fbe8a9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

gdi32

CreatePen
EnumICMProfilesW
Chord
DPtoLP
ExcludeClipRect
BitBlt
Arc

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

kernel32

GetStringTypeW
GetModuleHandleW
GetThreadLocale
IsBadCodePtr
IsBadReadPtr
LocalHandle

Sections

.text
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 945B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE