42b9a07b42da56ad8f940758f7f6f0939d55a1441eb12445fecf4e2e97fad8fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42b9a07b42da56ad8f940758f7f6f0939d55a1441eb12445fecf4e2e97fad8fe
Size

2.8MB
MD5

dd86c60d391e9a97bedbef9af6c66231
SHA1

351774ee05c3094b462ff41041dedf5a50cac564
SHA256

42b9a07b42da56ad8f940758f7f6f0939d55a1441eb12445fecf4e2e97fad8fe
SHA512

115ec1289270ecd6f43747c7857896d02e53c19f2b0ef92d22cfe9e95b3025dbb85f9402d927e1bca36a83233b985468cb1d5ff469e2af84a72f5799b460233c
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlyl2OjKj3OIwvZxdIm:c+8X9G3vP3AMs4Ojy3O/km

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42b9a07b42da56ad8f940758f7f6f0939d55a1441eb12445fecf4e2e97fad8fe

Files

42b9a07b42da56ad8f940758f7f6f0939d55a1441eb12445fecf4e2e97fad8fe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ