c42e1e71a84b2ca5d2cd3dc147459797 | Triage

Sharing

General

Target

c42e1e71a84b2ca5d2cd3dc147459797
Size

4KB
MD5

c42e1e71a84b2ca5d2cd3dc147459797
SHA1

99a524c004a3b465d37329c9db138c5797442b8c
SHA256

27e8bcc0849562d1b232bec5b3594284b751b19e69c37be9862fb7b1efda6811
SHA512

fc038a815aef8d44a965848d60f9fba0515c52f1e3c6e9c87c4d2076439e6deb82742d61545a903d22ef842147bd935366b3924c2b044475de70ed2b7756f018

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c42e1e71a84b2ca5d2cd3dc147459797

Files

c42e1e71a84b2ca5d2cd3dc147459797
.exe windows:4 windows x86 arch:x86

9e099e729afe8628e4f025a477ab8cc0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateRemoteThread
WriteProcessMemory
GetProcAddress
LoadLibraryA
VirtualAllocEx
GetThreadContext
CreateProcessW
lstrcatW
lstrcpyW
GetCurrentProcess
SetThreadContext
TerminateProcess
ResumeThread

user32

wsprintfW

advapi32

RegQueryValueExW
RegOpenKeyW

shell32

SHGetFolderPathW

Sections

.text
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE