042d5c45aa168d0619f8cec461fac1a1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

042d5c45aa168d0619f8cec461fac1a1
Size

422KB
MD5

042d5c45aa168d0619f8cec461fac1a1
SHA1

3be9dd2189031a1a855de9fb8dc3120e47d4664f
SHA256

e2a76ee1629776321d38bbda87d68180dedf3e225bf3b56f80f0501f47ee4092
SHA512

09ab2c06cf0266d7463bd3d8a979e163a4544e07a26d0b001a81ff6cf60f5c734285582d07f37c6f4ba919b87cb1fd8967ba51296debcec4efd9d68d11d1fb3d
SSDEEP

3072:vH8lDQjsSZLkL98iOQ94rSZw4NI4C3rR:vHcDOLkLpOQeuZBU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
042d5c45aa168d0619f8cec461fac1a1

Files

042d5c45aa168d0619f8cec461fac1a1
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 980KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE