142bfecad2c10de13a4fe6ed5393ea43 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

142bfecad2c10de13a4fe6ed5393ea43
Size

119KB
MD5

142bfecad2c10de13a4fe6ed5393ea43
SHA1

8bb65244c267739424972dbd5c1ab660dc7830fb
SHA256

cfe38178fc885c7fe09fdc0442891de218fe68fa8d342598c022315147462a09
SHA512

e355b9f30acdeb24be9d6cb2e988928f356f8b183b4f8ec944dd5327e6ea7cbdca91cfb442ec09d2432f91582836f81ab584576716010fa56171d0d808300ddd
SSDEEP

3072:y7A2UffO3ynOW4HZkxBO3WZuNwaAIs/6mU6GgJ+7LTs:ybGfDOvkxBPwwaS6mdJ6w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
142bfecad2c10de13a4fe6ed5393ea43

Files

142bfecad2c10de13a4fe6ed5393ea43
.exe windows:4 windows x86 arch:x86

3f2b57379bf704dd9519e4501a2aad1e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

ReplaceTextW
CommDlgExtendedError
FindTextW
ChooseColorW
GetOpenFileNameW
dwLBSubclass

gdi32

GetEnhMetaFileW
GetFontData
GetMapMode
GetClipBox

Sections

.text
Size: 73KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE