40044189fc859688de1d503a83d036fa | Triage

Sharing

General

Target

40044189fc859688de1d503a83d036fa
Size

628KB
MD5

40044189fc859688de1d503a83d036fa
SHA1

b4e62befaabe36f0950b0e0d52b2181b0d510150
SHA256

7ff1763558ee4b491ecc1dad70c85189d608088e1fe6221c715e1a4e4a4d42c2
SHA512

95a6af23622134b7d6afe4adcf293220bc631f1e33ce7a549b32b0f40c67b6e4cfbfc4f3e0e7fd6d8aecebddada8943c6dc6aa90ab0d518ba663be8d2d2d63aa
SSDEEP

6144:nIyFESWu0SWuGS97wj4kYcopdPm2ac8+1vVmPHB:IyLUEjVW+sB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40044189fc859688de1d503a83d036fa

Files

40044189fc859688de1d503a83d036fa
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ