42939465f1bc2939b734d5aba461bf10 | Triage

Sharing

General

Target

42939465f1bc2939b734d5aba461bf10
Size

124KB
MD5

42939465f1bc2939b734d5aba461bf10
SHA1

4a22d764f732c87b9d67698ba6b5456eb74be342
SHA256

ecdedf98b1bb50dda37a10d97d9398bcf8b10865f2444d0647916bb2e9d63b07
SHA512

9d5938b64dadd3d115fc666d2089bed525f51bf14269c5c282dc270b13713eab60de3a7af18c0585cb98e9bbf17c65fc408bc1849b8d28077b697ccab69865d1
SSDEEP

3072:efGgf5ToM/2GGAS4r2mvn8kHxaYcT6i5O0u3m:eeuZoCGh4ymvnLHxA6iE2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42939465f1bc2939b734d5aba461bf10

Files

42939465f1bc2939b734d5aba461bf10
.exe windows:4 windows x86 arch:x86

16da28a7c245bd2c5422c8b8633df1f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

PlaySoundA

vulanhookpro

VulanHookDll

user32

CharNextA

gdi32

SetMapMode

comdlg32

GetSaveFileNameA

winspool.drv

ClosePrinter

advapi32

LookupPrivilegeValueA

shell32

Shell_NotifyIconA

comctl32

ord17

oledlg

ord8

ole32

CoRegisterMessageFilter

olepro32

ord253

oleaut32

SysStringLen

wsock32

WSAStartup

Sections

.text
Size: 111KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE