40c8f83c4bf1a3c82d5bce427eb895534209087cc9b68b44c4545eb3e68ebcfa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40c8f83c4bf1a3c82d5bce427eb895534209087cc9b68b44c4545eb3e68ebcfa
Size

1.8MB
MD5

95bce5d723b44bee48c6943e01878894
SHA1

a079ba8f08841b1ce39acd8654919b1ce7e2a125
SHA256

40c8f83c4bf1a3c82d5bce427eb895534209087cc9b68b44c4545eb3e68ebcfa
SHA512

b67464c96f41b2cdb7ce62a56a1391563fa8ec9c725f1ea572d1a744fe8ca4a9be6d28d1d862e4a77ee219badab90174b979bc101cb87678f855831d5a3f991f
SSDEEP

24576:4MWMB3nr/0z3LN1jkOQf5cxZtKgvnJanLUyjPHwhXCO0sweEO7fghvC5TsgSLsp0:FW43rOB1jkjTgJEvDQFfwMael4sza6u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40c8f83c4bf1a3c82d5bce427eb895534209087cc9b68b44c4545eb3e68ebcfa

Files

40c8f83c4bf1a3c82d5bce427eb895534209087cc9b68b44c4545eb3e68ebcfa
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Exports

Exports

LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_

Sections

.text
Size: 987KB - Virtual size: 987KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

flag_dat
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 644KB - Virtual size: 644KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ