42dec0f79a25ce54f62a955e0b36a460 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42dec0f79a25ce54f62a955e0b36a460
Size

193KB
MD5

42dec0f79a25ce54f62a955e0b36a460
SHA1

1017106ad8aac35d1c9cb2c114ed3ce974ead840
SHA256

dc73e1d6714b346dc8540573e86ed28d7b1882fbbb21cf16bdde07639b76b155
SHA512

3604545c8562a0f7ca7b3091dd850c57ea6f7cd282af5f7efab2ce9a8f9c6f25a7799d6c70658402cbae82d12d5c2bbef7b9b93b90727cce79ecb175ac327b90
SSDEEP

3072:tuQga1qjDoVbi0widNpxAZcUuFiYPnH8juPjjkq6ICEheD+2T+jaIFAVCtd:tZjb7wzZcUaDnH8A3kCdvMoaIJd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42dec0f79a25ce54f62a955e0b36a460

Files

42dec0f79a25ce54f62a955e0b36a460
.exe windows:4 windows x86 arch:x86

bd73e13a62770cfb52cf2fdaacaab1f7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmAssociateContext

kernel32

SetProcessPriorityBoost
CreateEventW
CreateFileW
InterlockedDecrement
DeleteCriticalSection
TerminateThread
ReadFile
EnumResourceTypesA
GlobalAlloc
Sleep
GetModuleFileNameW
GetVersionExW
WriteFile
GlobalLock
CreateProcessW
GlobalUnlock

ole32

GetHGlobalFromILockBytes
CoTaskMemFree
StringFromGUID2

Sections

.text
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ