1140d0220f3f802d3c6a4d8a3439c1f2d9aab5a231a2831c37add59f77c7ec00 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1140d0220f3f802d3c6a4d8a3439c1f2d9aab5a231a2831c37add59f77c7ec00
Size

119KB
MD5

66722c97e11976f10e05d8941e6e927f
SHA1

cfb3ea7fc4322d02d4e8818ad0a90cea0cbb782f
SHA256

1140d0220f3f802d3c6a4d8a3439c1f2d9aab5a231a2831c37add59f77c7ec00
SHA512

b1772ccca8d6d57c25638a253f65f22ce58864f51b683cf58c24512fefd1657ca2e93364418afaf5ced4220da97d386bdcc769c4753e15d3a97f8fb8ac8a6c85
SSDEEP

3072:c1w2vGmOO5D/HDaHagNwj9XUHjnrbjLDvostjjPN0YQ8pPVKC2L:cm2vGmFbMW9kHjrPLDwmP+9w4j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1140d0220f3f802d3c6a4d8a3439c1f2d9aab5a231a2831c37add59f77c7ec00

Files

1140d0220f3f802d3c6a4d8a3439c1f2d9aab5a231a2831c37add59f77c7ec00
.exe windows:4 windows x86 arch:x86

d67b4e1587c28713054db4cf31779d2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleW
GetProfileSectionW
GetAppContainerNamedObjectPath
QuirkIsEnabledForPackage4Worker
CreateFile2
ReadConsoleA
CreateThreadpoolIo
BuildCommDCBA
GenerateConsoleCtrlEvent
VerifyVersionInfoA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE