42622744f3eab7e8d51906669eca29ef | Triage

Sharing

General

Target

42622744f3eab7e8d51906669eca29ef
Size

101KB
MD5

42622744f3eab7e8d51906669eca29ef
SHA1

07f4c5bb1d40aa1aa56da46bbc7128c1475feffe
SHA256

aeb49f4347ae923816a1a38776233bc3a1773250898284e82c262b5fd3e35ba8
SHA512

6273441c6349321b3ee330e6c47b0de125f4f360d7133f122446ee7e7449ac50f62d9277f6bd8146409ded79b84b7761d5678d78f986cb45ae8755ec0852a443
SSDEEP

3072:vd5ZdnGUcz2pEi6Yxbff8Zo3RiFNKT9U:FhTczag6bf+o38fs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42622744f3eab7e8d51906669eca29ef

Files

42622744f3eab7e8d51906669eca29ef
.exe windows:4 windows x86 arch:x86

6f890fd251de5970e09f298d83a737f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

GetUrlCacheEntryInfoA
FtpCreateDirectoryW
GopherGetAttributeA
IncrementUrlCacheHeaderData
InternetCombineUrlA
FtpGetFileA

urlmon

DllGetClassObject
CoInternetCreateSecurityManager
HlinkGoForward
URLOpenPullStreamW
BindAsyncMoniker
URLOpenStreamA

user32

CopyRect
CallMsgFilterA
AdjustWindowRect
CreateIcon

Sections

.text
Size: 41KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE