42460f8f1f4c4b87dfffc9ca4f9820ff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42460f8f1f4c4b87dfffc9ca4f9820ff
Size

7KB
MD5

42460f8f1f4c4b87dfffc9ca4f9820ff
SHA1

76cff0ea055a56d22e394caaff54ca026c629bd2
SHA256

60a5b474d5378b150f9f1faead3fffdc41afd6042e62c6b85a4f69e27f19507f
SHA512

28e9da29bbd4a8671fb5a7491d6a67e7d8f164dc0e64ae4a96b27dbc1e7f9ca44cdfa1b002ba5046222ae68e455e2a245570b647dd17e1f2ce5d3d5baf3da715
SSDEEP

48:6Fs6NSCIUZDyqosNAT23I04xYTLK7hBtYOq5swx/HmYmHp/hRfW/AKLJdbLBhKfy:MLSCIUtyqz0YLK2H5F1opfWNLJ16

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42460f8f1f4c4b87dfffc9ca4f9820ff

Files

42460f8f1f4c4b87dfffc9ca4f9820ff
.exe windows:4 windows x86 arch:x86

87cee552fb9c1e81b80976df7c7ef13e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateRemoteThread
ExitProcess
GetModuleHandleA
GetProcAddress
GetTempPathA
OpenProcess
Sleep
VirtualAllocEx
WinExec
WriteFile
WriteProcessMemory

msvcrt

memcpy
memset
strcat
strlen

shell32

ShellExecuteA

user32

FindWindowA
GetWindowThreadProcessId
MessageBoxA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE