42977998d8032444b50b8cb82b531af7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42977998d8032444b50b8cb82b531af7
Size

18KB
MD5

42977998d8032444b50b8cb82b531af7
SHA1

8c93d633e6fe6aee669053b3b68a928f140de46f
SHA256

75e8be6a225173e2e44ffd4536f70b187a4d63aa8a808d19aa6852901572d288
SHA512

361628d1364c8309931c2165923c3d808591a055f654eca5b049b528f99a8e85d4062ac1a93980c6d224464b0616b246519c3eb6a7a213e7d30094e5ca6f648f
SSDEEP

192:Jd9Cv0ralaybQdBtbrG0qo43OpgtAqt4+OD1Xxuh1B7N1idB/5iipc0/0:Jd9StGyo43OJI4rxButiH5Npzs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42977998d8032444b50b8cb82b531af7

Files

42977998d8032444b50b8cb82b531af7
.exe windows:5 windows x86 arch:x86

351cc07e6517a5f8579259e0495feaf2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcessHeap
VirtualAlloc
RtlUnwind
TerminateProcess
GetCurrentProcess
IsDebuggerPresent

user32

MessageBoxA

advapi32

RegOpenKeyExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 586B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ