940a4222d86eef6b5a74e352535942de33b96e710068d556ad920680fa7d2720 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

940a4222d86eef6b5a74e352535942de33b96e710068d556ad920680fa7d2720
Size

27KB
MD5

59fed5b88246ef73543e140519f03ad3
SHA1

6a31d502a1ee64517f7b289a9803750386a9fe58
SHA256

940a4222d86eef6b5a74e352535942de33b96e710068d556ad920680fa7d2720
SHA512

a150f666c821546bbf692a92cf6f1e4d11fc613f57f4e9c5c31a3eb25106b046ef8008caabab15140273890dc50c5898e3c8638494bdacc86767f48504800626
SSDEEP

384:0u1MfDP3WwG1pB/yQWOO/+0l+WHrp3MwBavouyp5gc:dSa/XB/KTG0lXr5Meoon

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
940a4222d86eef6b5a74e352535942de33b96e710068d556ad920680fa7d2720

Files

940a4222d86eef6b5a74e352535942de33b96e710068d556ad920680fa7d2720
.exe windows:4 windows x86 arch:x86

8b952403cd7980f20cd10a1500bc5902

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

StgOpenStorage
CoInitialize

kernel32

RaiseException
HeapSetInformation
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
Sleep
TerminateProcess

advapi32

CredFree

dhcpcsvc

DhcpDeRegisterParamChange

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ