42ab23c70f011c5e2ea70cf401d81a98 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42ab23c70f011c5e2ea70cf401d81a98
Size

608KB
MD5

42ab23c70f011c5e2ea70cf401d81a98
SHA1

a0d658442f7a7445b5df0eb15ada5cedeadb3ab6
SHA256

8d3bf7e405900f7022ab1e2b5e6be807a8d63744f2900d9567dd0a6dd51b3795
SHA512

1508842ba7f7f80e9b680bf5f8a1140bd8e24c854fa61bfcc19d3f44bd0666b7bfcd9cc00b90f4ee4d21fc050784fecdcf01b5d06d41331816394eb6c797dca1
SSDEEP

12288:zjUXmdyLYFH5oe8Qwjb/ufXryakjKuz9LPpzx16myM:zjXdeuHmewufXryaSP6Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42ab23c70f011c5e2ea70cf401d81a98

Files

42ab23c70f011c5e2ea70cf401d81a98
.exe windows:4 windows x86 arch:x86

a1f3c85938d839f223b9d794fc14cbfa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetTempPathA
GlobalAlloc
GlobalFree
ReadFile
SetFilePointer
WriteFile
lstrcatA
lstrlenA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 606KB - Virtual size: 606KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE