42aec34c732daa378e26913375292b19 | Triage

Sharing

General

Target

42aec34c732daa378e26913375292b19
Size

52KB
MD5

42aec34c732daa378e26913375292b19
SHA1

ca118a9ffebc80e4ee72e4efa1d8de4790eb16fa
SHA256

e7e632c062cc028662e2f90c3fecf3884ee55bfeb8d77c73a7d9e13e02314435
SHA512

c3d282efaffc11de31c71910a6186b51066a3c30ed758b92a197c900abbab934f08082a00c00eb9e1adeae9071f9cd7d4b9b6b8c02fbd9fb75351b45f4b56b2b
SSDEEP

768:L15t1enxQpTtNTofvGOt5AwaS/iKH2Srbb2dSWH8ti/rx:L11exQpTOpQUiZSflWHQi/rx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42aec34c732daa378e26913375292b19

Files

42aec34c732daa378e26913375292b19
.exe windows:4 windows x86 arch:x86

2bed3b575b122ce7042753fe75b3b7d0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
GetModuleFileNameW
SetEnvironmentVariableW
SetEnvironmentVariableA
WideCharToMultiByte
UnmapViewOfFile
lstrcpynW
GetFullPathNameW
GetFullPathNameA
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
GetEnvironmentVariableW
CreateFileA
GetEnvironmentVariableA
GetVersion

user32

MessageBoxA

Sections

.text
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 44KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE