40794f89adf3f9d2f6636efed1076b1abdfff786795c391838be5d9bef68042c | Triage

Sharing

General

Target

40794f89adf3f9d2f6636efed1076b1abdfff786795c391838be5d9bef68042c
Size

26KB
MD5

4a7299b5840d51359803d594f5950a17
SHA1

3586b152e6b60a8ca5195b3f138c480fff5d6d06
SHA256

40794f89adf3f9d2f6636efed1076b1abdfff786795c391838be5d9bef68042c
SHA512

41d0adb4c355a5aab5ed6bdf5a8850eda3bf70ea4298a8ed8e9163fbd2443a1e0773d4a4dd813f8e5c20a2acf89e6806793661152a6311d7c17ddb9213a3f32c
SSDEEP

384:GGjw95yGiZqhpTUohIo/U4nllHQCh1I6xpPsZEz:GGGyDqhpJ+o/U4nXQQ1i6z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40794f89adf3f9d2f6636efed1076b1abdfff786795c391838be5d9bef68042c

Files

40794f89adf3f9d2f6636efed1076b1abdfff786795c391838be5d9bef68042c
.exe windows:4 windows x86 arch:x86

f8d8aee08196483a265bcf1e1242daab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
SendMessageA
GetWindowRect

kernel32

GetStartupInfoA
GetModuleFileNameA
CloseHandle
GetModuleHandleA
LoadLibraryA
HeapAlloc
GetProcessHeap

gdi32

GetTextExtentPoint32W
SelectObject
TextOutW

comdlg32

GetSaveFileNameW
GetFileTitleW

comctl32

ord17

ole32

CoTaskMemFree
CoTaskMemAlloc

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ