b42bebaf2ff14399e33464ca001d4650 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b42bebaf2ff14399e33464ca001d4650
Size

20KB
MD5

b42bebaf2ff14399e33464ca001d4650
SHA1

9ebf635a4ee94c1191d103c4462601b66e1766b6
SHA256

df4eea3fee795beff152b94d10018848cc849234092a09f5879fb30b063816ea
SHA512

f4cd6a50067b10f0f740209907484948138db2e00c251aa82b3d6e172bd9c384a809dd68d3591b98c1170a37e255b27c0d33b216a99d6bf0f8050e1ce1f9a1b5
SSDEEP

192:57hLVC/tgr3Id6Y9kIP1oy4PgVDqQ9Z1:57hEGYk+1ePgVD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b42bebaf2ff14399e33464ca001d4650

Files

b42bebaf2ff14399e33464ca001d4650
.exe windows:4 windows x86 arch:x86

7920a888cb8a7e665979afd78d4dae40

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetLongPathNameA
WriteFile
CloseHandle
GetTempPathA
CreateProcessA
GetStartupInfoA
GetModuleHandleA

wininet

InternetQueryDataAvailable
InternetReadFile
HttpQueryInfoA
InternetOpenA
InternetCloseHandle
InternetOpenUrlA

msvcrt

_controlfp
__set_app_type
isxdigit
isupper
isspace
ispunct
isprint
islower
isgraph
isdigit
isalpha
isalnum
div
ceil
atoi
atol
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler3
sprintf
rand
srand
time
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_itoa

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ