42a8e0eadecf6a568d4364729aa08df3 | Triage

Sharing

General

Target

42a8e0eadecf6a568d4364729aa08df3
Size

148KB
MD5

42a8e0eadecf6a568d4364729aa08df3
SHA1

378bb1fdd39edca0846f54290af6807e29ca8df9
SHA256

4f54b90e7c7c5ffe5e089a2800d02d2e598ed9426f8331419138e67369084302
SHA512

4abb9295d71012460f9270dbe605b373866d43af7bd89f1ba88bf21d211a83b8bca80fc690ca959230e872b4ce1aa07c404c5a3fba390ed3e72354a6b8f995d0
SSDEEP

3072:cP0Uk0itS7/x5SAEayXpey+3Lhjp0NXXP9eQQPOM+jgo6gu:cPCNU/ru55+3LvcP9eQQGhzRu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42a8e0eadecf6a568d4364729aa08df3

Files

42a8e0eadecf6a568d4364729aa08df3
.exe windows:4 windows x86 arch:x86

04c9dad1102153696a563b0724502821

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

msvcrt

strrchr
tmpnam
wcsspn
strcspn
wcstombs

Sections

.flat
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 90KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE