242903881afe7ae46eddfc67d3f8cf34 | Triage

Sharing

General

Target

242903881afe7ae46eddfc67d3f8cf34
Size

49KB
MD5

242903881afe7ae46eddfc67d3f8cf34
SHA1

f167ff68aed199d103f41de3fc62959268e57672
SHA256

1fc9c0aee6109d47d3f4623ca3392083b942a04dce202ea060c925b3d9cbf2ef
SHA512

4029f566bc6049572fd2893bc3c8b2d70ec49895c866bf295f0d904d32207abed5a4dbfec8460bc0565fd984997f6ee81258e14b84389d4541d91d0b7ada4151
SSDEEP

768:h5hUiterRmFeANCNN7TL0T8vI4iEyDyq5T/DRYUUBYjQqoq022:h5hUic4B0bXoT/Req5bCJWQqo1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
242903881afe7ae46eddfc67d3f8cf34

Files

242903881afe7ae46eddfc67d3f8cf34
.exe windows:1 windows x86 arch:x86

84d09e5ead59bf43527eee53a6ed7480

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind

user32

MessageBoxA

crtdll

_iob
_itoa
__GetMainArgs
_strnicmp
toupper
abort
exit
fputc
fwrite
gets
localeconv
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strncmp
strtol
wcslen
wctomb

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 608B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 828B - Virtual size: 828B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE