42ae75d8c083db6bd2a80f398ba9effe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42ae75d8c083db6bd2a80f398ba9effe
Size

167KB
MD5

42ae75d8c083db6bd2a80f398ba9effe
SHA1

12e7bff8dce6cda1fe90a27df972455af79a8f4a
SHA256

1ede106630bda988f6d79bda661b50fabba996098dc185a420b0a8219b9ae5d3
SHA512

41a454b8ac4f8271368a6371aa1e4cbba96c2947b7bcb53a72fa70f861d33a2e2452c18454c4d08f519f5e8022e477bb22a6f1037d81b7448c56a16f634bbff7
SSDEEP

3072:AGBIwTG4BT4UPezz0vESEDWoUCdll4TSAZfwndJFKKoLZDc1y:pBIwTG4kzovV4hjdJIL1H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42ae75d8c083db6bd2a80f398ba9effe

Files

42ae75d8c083db6bd2a80f398ba9effe
.exe windows:4 windows x86 arch:x86

60d9506b9ed0598cc54a320ffe09b6bd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

ole32

CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

kernel32

LoadLibraryExW
CloseHandle
GetCalendarInfoA
WriteFile
GetStdHandle
SystemTimeToFileTime
LoadResource
LeaveCriticalSection
lstrcpynW
FindResourceA
GetProcessHeap
EnumResourceNamesA
GetVersionExA
LockResource
SizeofResource
HeapFree
FindFirstFileW
HeapDestroy
GetSystemTime
LoadLibraryW
GetModuleHandleA
CreateFileW
HeapAlloc
FindResourceExA
TerminateProcess

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ