42592e7d1b0e635e3b651e16baee801f8c99d5aaca48ef96e979042ffcbfaade | Triage

Sharing

General

Target

42592e7d1b0e635e3b651e16baee801f8c99d5aaca48ef96e979042ffcbfaade
Size

27KB
MD5

50dae426fa2e2e52ddb552aa354328b0
SHA1

801ab378dc317e116b6f449aab7e663ef862e84d
SHA256

42592e7d1b0e635e3b651e16baee801f8c99d5aaca48ef96e979042ffcbfaade
SHA512

3e3455e2f40df63555a77d2843b8f5aa37e79f0de6fc9189b1e166181d597b7e630b75f4fa5da751bbda45baf3f12d9af4101b7876f663b2767989b702b41667
SSDEEP

768:qrUhl79KVCwti4+l9G+HtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsUI+psmh:qrUn8d+1tdgI2MyzNORQtOflIwoHNV2U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42592e7d1b0e635e3b651e16baee801f8c99d5aaca48ef96e979042ffcbfaade

Files

42592e7d1b0e635e3b651e16baee801f8c99d5aaca48ef96e979042ffcbfaade
.exe windows:5 windows x86 arch:x86

2a7fb631f22727fd6fd90589adafa9b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
TranslateMessage
ShowWindow
SendMessageA
LoadCursorA
RegisterClassExA
PostQuitMessage
MessageBoxA
LoadIconA
EndPaint
DispatchMessageA
DestroyWindow
DefWindowProcA
CreateWindowExA
UpdateWindow
BeginPaint

kernel32

GetCommandLineA
lstrcpyA
LoadLibraryA
GetProcAddress
GetLastError
ExitProcess
CreateFileA

gdi32

CreateSolidBrush
CreatePen
CreateFontIndirectA
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ