42837175cb771cf78b98013cc7637071 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42837175cb771cf78b98013cc7637071
Size

751KB
MD5

42837175cb771cf78b98013cc7637071
SHA1

f9f92612daf8c9736aa1dce0fb12be11fa46f9aa
SHA256

765f81cbfa5b1a3457c9aa64c95709074e269c2143194d800f60f310853a22a7
SHA512

099a72a6c01ae5319903be624d43ed14d8d4a0bd8d0c4ce024369b920da4f3b9b642ebf8fb723a6835679af23a1a4bb81f4d6878fdbcb0799d129e8bca4e675a
SSDEEP

12288:pZsmvpmA7+S97QjQhTFTAEHMMEGRzzCm7NNfHpg5RR8Q62kDzcr:pZsmvr+SJGQNdHMMjum25RRf6nDQr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42837175cb771cf78b98013cc7637071

Files

42837175cb771cf78b98013cc7637071
.exe windows:4 windows x86 arch:x86

16d15f7ef23c17d5c40aa4fa152fe891

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryA
GetEnvironmentVariableW
GetStartupInfoW
CreateMutexA
DeleteFileA
Sleep
FindClose
GetConsoleTitleA
ResetEvent
GetStdHandle
WaitForSingleObject
GetCommandLineW
CreatePipe
OpenProcess
CloseHandle
ExitProcess
HeapSize
GetModuleHandleA
GetTickCount
GetCurrentDirectoryA
WaitForMultipleObjects
CreateFileA
GetFileAttributesA
SetLastError
VirtualAlloc

user32

DispatchMessageW
GetWindowLongA
FillRect
PeekMessageA
DispatchMessageW
FindWindowW
GetClassInfoA
GetDC
GetDC
GetSysColor
CallWindowProcW
GetDC
MessageBoxA

ureg

??1REGISTRY@@UAE@XZ
??1REGISTRY@@UAE@XZ
??1REGISTRY@@UAE@XZ
??1REGISTRY@@UAE@XZ

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 745KB - Virtual size: 745KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ