d42c7a259e31650a70644793b833827f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d42c7a259e31650a70644793b833827f
Size

15KB
MD5

d42c7a259e31650a70644793b833827f
SHA1

425b91cbf38c8f4af2a934da607afbfdc7f4a23b
SHA256

bd75b1cc4a9d9e6ee98c7c9c6e4357aa460e426a89f372b8312408694e8d8844
SHA512

9cfa6641bba11dbed200bb6a4c30be88dab261d09f29a08050d71853b0538e741c83584b1bbe147f5d2ed9ce794b450de0bf5703c7cd80463755569a347a3c24
SSDEEP

96:4cGx7ZnrjaVCcs6gIclWx5C4xw3DhK9Kd56GnXsQ9PQ:XIdNO23Dh2KfjXfQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d42c7a259e31650a70644793b833827f

Files

d42c7a259e31650a70644793b833827f
.exe windows:4 windows x86 arch:x86

c162473f2b23a9ebcac3fd8a0fcf7b1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsA

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ