42d0816bc71f693b36c08f54cd6c216f | Triage

Sharing

General

Target

42d0816bc71f693b36c08f54cd6c216f
Size

67KB
MD5

42d0816bc71f693b36c08f54cd6c216f
SHA1

8f00cc5283a6e7f5188c391744cf90bb5aa2417b
SHA256

ea76454b62170deb0c340a95a96e9d31d6fb035ff545244fb179a0b27516231b
SHA512

6bd14bead60370d7b0711a1cccc23280fadada3a4a036a27aad3e103800e068fd520c293c1feb6e4208c6fa4b25155fb04cb13604f452bfa11b91a7a23be4f5e
SSDEEP

1536:g13mIJYbaaZxk2mpIxixs3KrLc6kGtWwN0sXUa8S4:gYmYdxA2ixs3KLiGQOjb4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42d0816bc71f693b36c08f54cd6c216f

Files

42d0816bc71f693b36c08f54cd6c216f
.exe windows:4 windows x86 arch:x86

53ed8e8a6c207051bf5ba3d128f639e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
GetWindowTextA
CloseDesktop
DispatchMessageA
ToUnicode
GetKeyboardState
DrawIcon
GetMessageA
OpenWindowStationA
SetProcessWindowStation
GetForegroundWindow
LoadCursorA
CharLowerBuffA
OpenDesktopA
GetKeyState
CloseWindowStation

shlwapi

SHDeleteKeyA
wvnsprintfA
StrStrW
wnsprintfW
wnsprintfA
PathFileExistsW
PathMatchSpecW
PathRemoveFileSpecW
PathCombineW

advapi32

RegSetValueExA
CryptAcquireContextW
CryptHashData
RegCreateKeyExA
CryptGetHashParam
RegEnumKeyExA
CryptDestroyHash
RegDeleteValueA
RegQueryValueExA
CryptCreateHash
CryptReleaseContext
DuplicateTokenEx

kernel32

GetProcAddress
InitializeCriticalSection
VirtualProtect
lstrcpyW
GetModuleFileNameW
GetFileAttributesA
CreateEventW
VirtualAlloc
ResetEvent
FindClose
GetSystemTimeAsFileTime
GetModuleHandleA
CreateMutexW
FindResourceW
CreateThread
SetFilePointer
SetFileTime
lstrcatA
ReleaseMutex
GetCommandLineA
CreateProcessW
CreateFileA
MultiByteToWideChar
lstrcpyA
HeapFree

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE