40a1f8cfd48fe346d539081e34f4219babab085dd86fad9d0e2e15744ebd1306 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40a1f8cfd48fe346d539081e34f4219babab085dd86fad9d0e2e15744ebd1306
Size

33KB
MD5

bcbf664d8087bb9da3d7abb2058616ff
SHA1

02c2aad6cb4fb9fd272a43a6cef374064f53f798
SHA256

40a1f8cfd48fe346d539081e34f4219babab085dd86fad9d0e2e15744ebd1306
SHA512

21dea60f897255abbc97ca00b0f048a09e7396528f0e94d148b31fdc71f34659b4817ae9eb1a1cc224f65313fbd1c80f1d8121a87d2df8d10b89ab194f960c56
SSDEEP

768:SeAaL04BLz72FTgIYYU08dEFr3bRktD/9lIaBh:9AaL0407YAdFrLYzrh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40a1f8cfd48fe346d539081e34f4219babab085dd86fad9d0e2e15744ebd1306

Files

40a1f8cfd48fe346d539081e34f4219babab085dd86fad9d0e2e15744ebd1306
.exe windows:4 windows x86 arch:x86

9e07083c3e91fb05e14984556f52f6d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW
SendMessageW
EndDialog
GetDlgItem
DialogBoxIndirectParamW
wsprintfW

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
GetFileSize
lstrcpynW
lstrcpyW
ReadFile
CreateFileW
CloseHandle
HeapFree

comctl32

ord17

wintrust

WinVerifyTrust

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ