40dbb0cd170ffbefc6f63b1edc584bcfcd857a621df0f1661a359a2a59ef358dN

Sharing

Copy URL Twitter E-mail

General

Target
40dbb0cd170ffbefc6f63b1edc584bcfcd857a621df0f1661a359a2a59ef358dN
Size 463KB
Sample241109-253zmathnn
SHA256 40dbb0cd170ffbefc6f63b1edc584bcfcd857a621df0f1661a359a2a59ef358d
MD5 a29291d7410ab498cf5d0d354379f0d0
SHA1 ad3250d6e76853838bddd0448bc95ca4584aee29
SHA512 66fb8f3a308a03a1587fc057c1d5ff73f1a30de285891d5524282b5e2fd03c425a39fbfa2c78b8912dd299ccc0acca5571c9d59166f63fb96c21b4b47a217ab8
SSDEEP 6144:849g4s5tTDUZNSN58VU5tTt50NoYnX5tTDUZNSN58VU5tTokBf7bmS:8z4s5t6NSN6G5tb0fX5t6NSN6G5tTvz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40dbb0cd170ffbefc6f63b1edc584bcfcd857a621df0f1661a359a2a59ef358dN

File Explorer

40dbb0cd170ffbefc6f63b1edc584bcfcd857a621df0f1661a359a2a59ef358dN

.exe 463KB

40dbb0cd170ffbefc6f63b1edc584bcfcd857a621df0f1661a359a2a59ef358dN

SHA256 40dbb0cd170ffbefc6f63b1edc584bcfcd857a621df0f1661a359a2a59ef358d
MD5 a29291d7410ab498cf5d0d354379f0d0
SHA1 ad3250d6e76853838bddd0448bc95ca4584aee29
SHA512 66fb8f3a308a03a1587fc057c1d5ff73f1a30de285891d5524282b5e2fd03c425a39fbfa2c78b8912dd299ccc0acca5571c9d59166f63fb96c21b4b47a217ab8
SSDEEP 6144:849g4s5tTDUZNSN58VU5tTt50NoYnX5tTDUZNSN58VU5tTokBf7bmS:8z4s5t6NSN6G5tb0fX5t6NSN6G5tTvz
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

188416

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

132KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.retplne

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

40dbb0cd170ffbefc6f63b1edc584bcfcd857a621df0f1661a359a2a59ef358dN

generic