42a353f3620bd9af19bc6083d3cac432 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42a353f3620bd9af19bc6083d3cac432
Size

166KB
MD5

42a353f3620bd9af19bc6083d3cac432
SHA1

b8b457c20e543236da7a9d3247096760a30872e6
SHA256

e26fc71327ae4fe75df011be8f5870538d6ac4b1087fdd800f1cee2dc0353b76
SHA512

496d6129a87ded6f9d6d077e3cb9ef788e78aaceb1aef70cb400909c6d2111615f285a5067135705c10bcc4cac801b7f249e095b8e5b8da6789e2453c5fcc9f1
SSDEEP

3072:IvqxUCUBRaTbXfNFjsOlhvY/9tdh0cdpHXNOMWowCFFgdkvaX5T:3UCUfaTzfN1sOlhvCtdCcDHdOMWodgaK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42a353f3620bd9af19bc6083d3cac432

Files

42a353f3620bd9af19bc6083d3cac432
.exe windows:4 windows x86 arch:x86

a3b76c781e6aa2e38f259ebd55aaa542

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharNextA
GetClassLongA
GetKeyState
CharLowerA

msimg32

AlphaBlend
TransparentBlt

advapi32

RegCloseKey
RegCreateKeyExA
RegQueryValueExA

kernel32

GetThreadPriority
GetProcAddress
TransmitCommChar
LoadLibraryW
EnumResourceNamesW
ExitProcess
FreeLibrary
InterlockedDecrement
LoadLibraryA
InterlockedIncrement

Sections

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ