142d3921ae0909e21b0402d7dae78e49 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

142d3921ae0909e21b0402d7dae78e49
Size

34KB
MD5

142d3921ae0909e21b0402d7dae78e49
SHA1

090d3dcd15536a859c514d6d1074cac45ac84b19
SHA256

e9d738da46554f9f876cccb034a341ac5824cb476783600a26016f3de6e8b3cf
SHA512

2a4926711093bf8366671240b160000bf5fbe39d410a039c321bc2eb8e5d815e3e01ef35811bcf12340643e1c007e0d551118f22bf6b90d112c2ad1ff0a57875
SSDEEP

384:FlQpSYgaINtHUgoGJnIeICktPQAh+fztUmTuVP:MpSYgaIrHjJnut2pxPu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
142d3921ae0909e21b0402d7dae78e49

Files

142d3921ae0909e21b0402d7dae78e49
.exe windows:1 windows x86 arch:x86

f20b0b71accddae1523942bb7182a991

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

htons

shell32

ShellExecuteA

kernel32

GetProcAddress
GetModuleHandleA

user32

ExitWindowsEx

advapi32

GetUserNameA

crtdll

__GetMainArgs

Sections

.text
Size: - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 41KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE