42ee9f0548659946d33957fc3e10cab8

General

Target

42ee9f0548659946d33957fc3e10cab8
Size

176KB
MD5

42ee9f0548659946d33957fc3e10cab8
SHA1

4cf1d321fd0d08d0e36b4f3562f7a8c887786a3d
SHA256

22baff4927b3d9034c5d30a99baecc3c2a702cd05e4ad910026c950ffc1af5c9
SHA512

dd3fd536ba1e31689b417c8eb6afc0d794164dcd5f8cbf1442adccf2256286b939474fca388ec190e51912ad4c948b71a91e4585b5b29f307ee4b2369ec1e78e
SSDEEP

3072:84nCgC5rkEy5YZwi1lQJO6C5OvlJRO1tW60S+aSKh4M0lXpEaAcbmeY14tcZB8iy:znIemWJO6TJoYHaSA6m4yL0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42ee9f0548659946d33957fc3e10cab8

Files

42ee9f0548659946d33957fc3e10cab8
.exe windows:4 windows x86 arch:x86

eb5f522846197b61ebe68f44b95823e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitialize
CoRegisterSurrogate
CoRegisterClassObject
OleInitialize
OleSetContainedObject

cryptui

CryptUIWizDigitalSign
CryptUIWizFreeDigitalSignContext
CryptUIDlgSelectCertificateFromStore
CryptUIDlgViewContext

ddraw

DirectDrawEnumerateA
DirectDrawCreate

dsound

ord9
ord11
ord1

gpedit

BrowseForGPO
DeleteGPOLink
ImportRSoPData
CreateGPOLink

kernel32

GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetSystemInfo
WriteFile
LCMapStringW
SetTapePosition
VirtualProtect
GetComputerNameA
PulseEvent
SetEvent
ResetEvent
CreateEventA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 554KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

eb5f522846197b61ebe68f44b95823e9

Headers

File Characteristics

Imports

ole32

cryptui

ddraw

dsound

gpedit

kernel32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 88KB - Virtual size: 85KB

.data Size: 52KB - Virtual size: 554KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 88KB - Virtual size: 85KB

.data
Size: 52KB - Virtual size: 554KB