42f6831d430da884c650d924eb7fdba3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42f6831d430da884c650d924eb7fdba3
Size

60KB
MD5

42f6831d430da884c650d924eb7fdba3
SHA1

8a555160d81c69dcf210ebbe4d7e6ff6ab8161f3
SHA256

27b556c592ae940483782437d29daecd4eea2fdb1e800f6c2da2eec031397903
SHA512

bd57552c356a40ce9e3557ace2f3f77db09243a6c4f972e8ec6ae59b2d8694baa8305581c057d720e3fb5eee35b8b74aef735957280144d457ba30df9e1b5fd7
SSDEEP

768:Qa02dgMhW+RToS4vr3PUrJcGs/LWZk5THnMUeRQ5v6o:j02dgMnoS4z3PUZs/LW+5ThSo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42f6831d430da884c650d924eb7fdba3

Files

42f6831d430da884c650d924eb7fdba3
.exe windows:4 windows x86 arch:x86

ad3178324daa8befe154036c749359f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LockResource
LoadResource
FindResourceA
LoadLibraryA
SizeofResource
CreateMutexA
OpenMutexA
WriteFile
CloseHandle
GetModuleFileNameA
HeapAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetLastError
SetFilePointer
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ