42602d89a9a05d912a0e7c6c958ed8cf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42602d89a9a05d912a0e7c6c958ed8cf
Size

122KB
MD5

42602d89a9a05d912a0e7c6c958ed8cf
SHA1

f9db543b93078652379e29fb1151df59776f8b44
SHA256

7e933c648542b6992cb4ee875e2ea9fd84255300e24993de6fd989f35a7bfcab
SHA512

9e3063a29143b0c5989222120e4cc654bb472fe34fd91e0d5449d96669856f4543ee61c00d567514fd76c265728f3400136f3971360289716ff7bfaebd794b96
SSDEEP

3072:D2KQrcbCF001K0IsCGqNYlxIgLYL37a6NLNgLfcyOgLyozFq:D2KQAoHCGf47a6zefcyUohq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42602d89a9a05d912a0e7c6c958ed8cf

Files

42602d89a9a05d912a0e7c6c958ed8cf
.dll windows:4 windows x86 arch:x86

e1625d8071406afdd29d60bedf6aaa09

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetDateFormatA
GetFileSize
OpenFile
lstrcmpiA
lstrcpynA
lstrlenA
ExitProcess

Sections

.sforce3
Size: 25KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 91KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ