42a9ada0a9fa9672fb1248a8da964d90 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42a9ada0a9fa9672fb1248a8da964d90
Size

136KB
MD5

42a9ada0a9fa9672fb1248a8da964d90
SHA1

b9c49c1fd0e91fd90c4917791edd22df18750456
SHA256

eb0dff0d502805cdef4ba440ab011e925479e1fbf9fab9677ac28e4e1d205ee6
SHA512

a06f031c23746edc727925df5f15a2cb0f505d42f2e0fefa86e41b2ce66844f5786642f938ddde08b8e727c25d247f3fb8aef8d0b7f406cd7397e7f0b89cf1bf
SSDEEP

1536:s3gahjs3gahjR9w8PILfCmayZbScqej6mQT8cg:s3gahI3gahN9w8Zg1qHI/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42a9ada0a9fa9672fb1248a8da964d90

Files

42a9ada0a9fa9672fb1248a8da964d90
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packet
Size: 123KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE