40de2ade610f9bbb4ed1f8b9846e834e0532b27ebe27feba5c3ade4630e34e37 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40de2ade610f9bbb4ed1f8b9846e834e0532b27ebe27feba5c3ade4630e34e37
Size

120KB
MD5

1301fb59238629755d085ba75cdee4ac
SHA1

55f47c072dc056e97ac33f68dead33cc1e835338
SHA256

40de2ade610f9bbb4ed1f8b9846e834e0532b27ebe27feba5c3ade4630e34e37
SHA512

6aa26b34cd95f6c1531a07a3eb4e03c234c45d3007e038c46ba9b34c421d51eea2b525c7cdc6e9bbef9dcd907d5121b701f6b17aec3009c1ab7177b4a80bafcc
SSDEEP

1536:0klwF6S/edkhbZ6bUhCjZTgQYSgd3MnKH09wqwSsDOlDSLhP9RTbU0:08DS/RTQYSgd8nKULtsDBR8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40de2ade610f9bbb4ed1f8b9846e834e0532b27ebe27feba5c3ade4630e34e37

Files

40de2ade610f9bbb4ed1f8b9846e834e0532b27ebe27feba5c3ade4630e34e37
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ