42f7a00cf12ff19d045170dff54149c7b1d312589a9bd396ede419dc0fec8f4e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42f7a00cf12ff19d045170dff54149c7b1d312589a9bd396ede419dc0fec8f4e
Size

73KB
MD5

2847b2e78c2d3b8b3ed94c9c5707be5d
SHA1

34a7bde0f7675b0939c7448478905a693a0dedbf
SHA256

42f7a00cf12ff19d045170dff54149c7b1d312589a9bd396ede419dc0fec8f4e
SHA512

294684912b18c60bec68dc589154e303ea9d13b18b4415ee4c73fb99f2535154da533db80da03b4892f5074e934a47015d6a23878a50f4b4b53b04889808a114
SSDEEP

1536:14R9KzUD5X66zFOa2INL0U/zDDiGPsMI7MPeDm5Qr7:2KzAXXzFt2INJ/4MPuqQr7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42f7a00cf12ff19d045170dff54149c7b1d312589a9bd396ede419dc0fec8f4e

Files

42f7a00cf12ff19d045170dff54149c7b1d312589a9bd396ede419dc0fec8f4e
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE