42a797a4f307560dc99d8f936ae0ed8a2f3811d58e7fb4bc87a0886578110149 | Triage

Sharing

General

Target

42a797a4f307560dc99d8f936ae0ed8a2f3811d58e7fb4bc87a0886578110149
Size

791KB
MD5

64d371aa778984786fb0368d5824a841
SHA1

7044fbd5634becff21be68f42546d529a5544ff2
SHA256

42a797a4f307560dc99d8f936ae0ed8a2f3811d58e7fb4bc87a0886578110149
SHA512

7319d9a1428c889f3ff6cfe6346a88781bcd19e137d6a1d5b67f6bbeefb27a56a1094d506b22b544c0322ffafb08322b57319ccecc16fb488a33594a65729c93
SSDEEP

12288:FwTyVhpCNtWV4Z9GthGp0V2gbEPzyGT32hAwAFFnUSf5v61pH42FuFnW5M72j1/8:FK1ZqaK5bezy031FJxRs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
42a797a4f307560dc99d8f936ae0ed8a2f3811d58e7fb4bc87a0886578110149

Files

42a797a4f307560dc99d8f936ae0ed8a2f3811d58e7fb4bc87a0886578110149
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 789KB - Virtual size: 788KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ