c542da1da7c2e7c8b378d31c0e633030_exe32[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c542da1da7c2e7c8b378d31c0e633030_exe32.exe
Size

101KB
MD5

c542da1da7c2e7c8b378d31c0e633030
SHA1

41a8b209982be346613456e105a7ce5a981eb3c1
SHA256

73d94de395a6828f87d28cf7951ef58cf555edab80f8b8d8393f9862bf401676
SHA512

15d1655cbffa53931b90278652b6eec41ad460667c5be769e8b0022911a52d56e6f12ed4685eb5ef8a058e2b45cef0144a21ea27e0fec9b8d015351a8c651876
SSDEEP

1536:S891OwxgwYfPSqlGv+BNXNvuZS36EDtAZ7jz6dTdMQiMtYwJj24G1Nh5:bOwNMSqoKXNvuZAFDqXzlzQa4k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c542da1da7c2e7c8b378d31c0e633030_exe32.exe

Files

c542da1da7c2e7c8b378d31c0e633030_exe32.exe
.exe windows:6 windows x86

c5318043e3c8ed164ed6aaad17fbbf74

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadStringW

msvcrt

_controlfp
_except_handler4_common
__wgetmainargs
_cexit
_exit
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit
_XcptFilter

shlwapi

ord388

shell32

ord100

ole32

CoCreateInstance
CoUninitialize
CoInitialize

kernel32

UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE