42ccca05f0efe7b2c483d4d98e13cd8f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42ccca05f0efe7b2c483d4d98e13cd8f
Size

17KB
MD5

42ccca05f0efe7b2c483d4d98e13cd8f
SHA1

d1938ff8d57bce9d5ab538bdd698f79712407c78
SHA256

73a4f5fc578557df578a04b59a2af42ea502adbfd6d65baa46af192857b37dfa
SHA512

367a7cd1cdedf5b81d0afcf84097f69b98966dc861b5c3cadade2826871536cb823adcfdc9f6f4e9e3303a85b95fee24dc78b6997aa48c5eb8e62e2a85f449ed
SSDEEP

384:bO+fOyvp9GC9PzmKWlGibBI48B/Hrg9ygEHs:bl2B8zmHltBc/HIyvs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42ccca05f0efe7b2c483d4d98e13cd8f

Files

42ccca05f0efe7b2c483d4d98e13cd8f
.exe windows:5 windows x86 arch:x86

fa8560b3dd08ee001893e0edd10c4665

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
SetUnhandledExceptionFilter
ExitProcess
GetWindowsDirectoryA
lstrcatA
CreateFileA
VirtualAlloc
GetProcessHeap
TerminateProcess
IsDebuggerPresent

user32

TranslateAcceleratorW
LoadCursorW
GetDlgItemTextW
EnableMenuItem
DefWindowProcW
UnhookWindowsHookEx

comdlg32

GetOpenFileNameW
FindTextW
CommDlgExtendedError
GetSaveFileNameW
PrintDlgW
ChooseFontW

advapi32

RegOpenKeyExA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ