4292168dbfc3ddc7e43bc8ed46f0e0ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4292168dbfc3ddc7e43bc8ed46f0e0ca
Size

1.6MB
MD5

4292168dbfc3ddc7e43bc8ed46f0e0ca
SHA1

01c09dc141f308c357fd35c998788699f6c65f5a
SHA256

c06f2ea14cf76771fe6ad54858df94f64437b189052bd32c35439c8d9fa5080c
SHA512

c951f28d2994083278e436fc1c33a6bd904c2e4441ef5120dee95cb7ca97f1be20ff97d91921756f535560ad1fb89ad9f06a2599f0e1e73509ade6f8c23db9f1
SSDEEP

24576:PrlD+48Y2VmdaYCgM8CEhAZR5PhEAo2vrlgm7h8LUYgzw1ozOfkNg/R25Vosn65l:3ehHDD3D7L/O7YyS+p+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4292168dbfc3ddc7e43bc8ed46f0e0ca

Files

4292168dbfc3ddc7e43bc8ed46f0e0ca
.exe windows:6 windows x86 arch:x86

82b32a5dae9d181a81ae39981e2f41b0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AcquireSRWLockExclusive
CloseHandle
CreateSemaphoreA
CreateThread
GetCurrentProcessId
GetCurrentThread
GetModuleFileNameA
ReleaseSRWLockExclusive
ReleaseSemaphore
TerminateThread
WaitForSingleObject

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ