42bb4b38ae54a8b869439c815b61034b | Triage

Sharing

General

Target

42bb4b38ae54a8b869439c815b61034b
Size

489KB
MD5

42bb4b38ae54a8b869439c815b61034b
SHA1

94e2897b43cc3b720167e84a9decc61476c55530
SHA256

b5837679d2ce947c9873fb6466f58e215a9a2af3c7c7cf497a57d7b5e40cba1c
SHA512

b29f6a627954a48402485cab2486f2ed4ba3e7d233fa0f3277d0edbd811b7996762c9169070bff6030c2a72ccd8be235c28a199266f43100c6d56e14ee9b3e14
SSDEEP

12288:2i7n6QjBtbKjD/AkVmSc0NhOLS26ni/WlQ0ECX:j7nhvbKvfmkALKi/Wq0EY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42bb4b38ae54a8b869439c815b61034b

Files

42bb4b38ae54a8b869439c815b61034b
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 485KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.v
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.nweh
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE