f40fbacf3c25d1a9772b00f18a02ef5aa383dd47fa2a4470e0e709c85048193f | Triage

Sharing

General

Target

f40fbacf3c25d1a9772b00f18a02ef5aa383dd47fa2a4470e0e709c85048193f
Size

67KB
MD5

b37cd929724f68bc7a7c645516739ea7
SHA1

bce66d37100b5a07ab466b1f0bda1d6843391608
SHA256

f40fbacf3c25d1a9772b00f18a02ef5aa383dd47fa2a4470e0e709c85048193f
SHA512

52ddc5b21c9c5ebbfea1272f6c39443c7e8a3e98c740a1de3a26f6603ce1da16dda6409ef605982ed44baff6c66bffac6ace816572020fff26ec55d42f4639fa
SSDEEP

1536:vJKS8xdq0yGQ4QBQRstUOLA5CTLideK+UfZ/XWrI:RJ8x0VyRstbLA5CTLij+OZ/XW8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f40fbacf3c25d1a9772b00f18a02ef5aa383dd47fa2a4470e0e709c85048193f

Files

f40fbacf3c25d1a9772b00f18a02ef5aa383dd47fa2a4470e0e709c85048193f
.exe windows:4 windows x86 arch:x86

231425377893abb7b2ff9764e70528f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetOpenEnumA

version

VerQueryValueA

wsock32

WSACleanup

winmm

waveOutSetVolume

Sections

CODE
Size: 35KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

WinLicen
Size: 54B - Virtual size: 54B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE