42d170dc321e578b04e26571b5fdcd68 | Triage

Sharing

General

Target

42d170dc321e578b04e26571b5fdcd68
Size

381KB
MD5

42d170dc321e578b04e26571b5fdcd68
SHA1

1146a532f15dd7df4ff81d927ac0bc5cf99a9bde
SHA256

cf263dc77c30f8b1ee83f8e3768f972a8219cc2ebe50bde418c5080235fa6e4a
SHA512

a8f0ac9e3728ec2988cf37d90c10f518f242c60afe786155f48b735fd96e3e0ee88a0047d0885266c0556fad1107511f57e47e5ee7673712a78d4f92f373ac9e
SSDEEP

6144:Ltw2ORK13Eh3A1htU86BuASHyysUd22TDjrxJCIuK01Z1Rorceqer217W:LtwRRKBG3XaAGsETfrmhrDor5Bryy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42d170dc321e578b04e26571b5fdcd68

Files

42d170dc321e578b04e26571b5fdcd68
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 247KB - Virtual size: 246KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ