40eb4214f83ab025b6ffe70f8c0924404a3420634706c3cd6819fa403d334811 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40eb4214f83ab025b6ffe70f8c0924404a3420634706c3cd6819fa403d334811
Size

2.3MB
MD5

a87fa62c24d4a424762c4e7a05120754
SHA1

17fafaa7506bd9eb5594977481a5ecabfc5cb686
SHA256

40eb4214f83ab025b6ffe70f8c0924404a3420634706c3cd6819fa403d334811
SHA512

b17fa5e7bf0d23af72f16759076ab009b853e417a91a70a524b9ff48a63cd997fbf5cfcf3d0fb45282373af32894c127351c8266551a340cee8de930e71562db
SSDEEP

49152:znJ3BapeGbjMJqFYrLa0bW1R2eBFr82m+oH:zJBa5bjMu4WKWry+W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40eb4214f83ab025b6ffe70f8c0924404a3420634706c3cd6819fa403d334811

Files

40eb4214f83ab025b6ffe70f8c0924404a3420634706c3cd6819fa403d334811
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 528KB - Virtual size: 525KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 1.3MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE