c40218a2defdbba4b362bb89c504ad36 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c40218a2defdbba4b362bb89c504ad36
Size

404KB
MD5

c40218a2defdbba4b362bb89c504ad36
SHA1

2de526795493219b8d1f91b06834104854ae95f1
SHA256

77e75ebafaa00da5b7b64e5d30c22db4fb0cf406c259bfd001b89c3358b15160
SHA512

d7522af637ab4cbe2294842932919a5e82ea10517353065e549e36449305bed194f69ada8bdc4f23edadb25c186f167d600839799354b2171661ff7aaa216a49
SSDEEP

12288:eZEKMhL2qdU6KnEQPU1/EHnnQIYXSYoJG:eel2qwbMiwIYXSYg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c40218a2defdbba4b362bb89c504ad36

Files

c40218a2defdbba4b362bb89c504ad36
.exe windows:5 windows x86 arch:x86

15aab2e185be70f81017cb4d5c11c70b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
GetCommandLineA
GetCompressedFileSizeW
GlobalAddAtomW
FlushConsoleInputBuffer
ResumeThread
RemoveDirectoryA
SetConsoleHardwareState
GetBinaryTypeA
GetSystemTimeAsFileTime
VirtualProtect
GetThreadPriority

user32

DrawCaption
LoadImageW
GetMonitorInfoW
GetClassInfoExA
DdeCreateStringHandleA
OpenDesktopA
GrayStringW

msvcrt

_cputs
_ismbcl1
_wsplitpath
div
memset
strtok
wcscspn
memcpy
_mbsnbicmp
_stricmp
_wcsupr
_wcsncoll

Sections

.text
Size: 395KB - Virtual size: 671KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ