e40d109d680c3c9d7d7ace2ce0fb189ed2ba27070afcf27463d2f7538a8e96aa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e40d109d680c3c9d7d7ace2ce0fb189ed2ba27070afcf27463d2f7538a8e96aa
Size

886KB
MD5

50226f014c2ad943bf1049f3cb476f00
SHA1

06ffb2567ff757929cf0628a2716c4028a66fb82
SHA256

e40d109d680c3c9d7d7ace2ce0fb189ed2ba27070afcf27463d2f7538a8e96aa
SHA512

031d77577ec56b488651377f6fff55eab97bb9a2cb59dedadaf855032a7bfff8cbba4df1d81b4b599c6ef84b0e34759ae125d331949290627cb60b8cf8fc34d5
SSDEEP

24576:+J9rofw0jqXR8oSnzV8Jwg7qfE14TogqGLOcAZ8zY/WnV:Hw0jqXqGyg6dd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e40d109d680c3c9d7d7ace2ce0fb189ed2ba27070afcf27463d2f7538a8e96aa

Files

e40d109d680c3c9d7d7ace2ce0fb189ed2ba27070afcf27463d2f7538a8e96aa
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 839KB - Virtual size: 839KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ