42e2e44268d0f374ebe47ba59754f49e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42e2e44268d0f374ebe47ba59754f49e
Size

330KB
MD5

42e2e44268d0f374ebe47ba59754f49e
SHA1

7b28155c080bee619ce737de5edf9eb9bb1abad6
SHA256

a0118be57bc7619302561ad3d420e24358a67653bb2beb34f1a54cdb3bcd4490
SHA512

c8ac7f88b2e47e4a6130e337149c9f5a87829cfdf7fa21090671b0ebd149b9cac977877a0e139f5e13edd41a7b5021aea8aa340f783341d61fc296760a855291
SSDEEP

6144:tKEB6dqy3+0JlxXSO/g/J/tHqktceTKvrVQBYs/pI9zui2vJoGyXDSrhX:tKEBcqy3TJlYO/g/J/NqSZc5ds/KYi2D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42e2e44268d0f374ebe47ba59754f49e

Files

42e2e44268d0f374ebe47ba59754f49e
.exe windows:4 windows x86 arch:x86

659b42915cdf504c9e7949e2ffe014f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetLastError
GetProcAddress
VirtualFree
HeapFree
ExitProcess
Beep
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
LoadLibraryA
RtlUnwind
HeapReAlloc
HeapAlloc

netapi32

NetDfsAdd

avifil32

EditStreamPaste

Sections

.text
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 206KB - Virtual size: 533KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE