0421457ca17cfc754be10b88bca733c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0421457ca17cfc754be10b88bca733c0
Size

162KB
MD5

0421457ca17cfc754be10b88bca733c0
SHA1

4aaacd5b7534c61da305fe957356063ae8f7cebd
SHA256

e0f2f20a0c58c0d9514a9e2e7a5c9ab190408357666c083a3a0a2126b921bec4
SHA512

49ac901b51a7d24a5abf4066cfc008cc3d61e6c58cb3cda35f24f2180ab0cf51becfa790f7247a0cd8ca1be9a749329cf1eee7ba935f091a467e84768527f819
SSDEEP

3072:svXPcDn7S7FTR3tya0DCPWDn6NoQQ45UVvD6CY8l2c1AXm/K3Y2HVKS2mX:svPWoFTRdf0eQ45QWwEdWC3v72mX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0421457ca17cfc754be10b88bca733c0

Files

0421457ca17cfc754be10b88bca733c0
.exe windows:4 windows x86 arch:x86

ad4221cde38071db84c09a991dd1e892

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetNextVDMCommand
SetCurrentDirectoryW
GetStringTypeW
FindNextFileW
SetThreadPriority
SetErrorMode
FindFirstFileW
LocalFileTimeToFileTime
SetEnvironmentVariableW
GetShortPathNameW
FreeLibrary
FileTimeToSystemTime
EnumResourceNamesW
FindResourceW
GetLocalTime
CompareStringA
RegisterWaitForSingleObject
SystemTimeToFileTime
FileTimeToLocalFileTime
LoadResource
FindClose
SearchPathW

user32

GetCapture
InvalidateRgn
ReleaseCapture
ExcludeUpdateRgn
GetWindowInfo
ValidateRgn
ValidateRect
SetCapture
GetUpdateRgn

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imul
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ