042b4bec085af1a97baa9828ce6c4d975da897cf3a378d0d0e80dca8aa1382f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

042b4bec085af1a97baa9828ce6c4d975da897cf3a378d0d0e80dca8aa1382f6
Size

82KB
MD5

5767fe13e9b3dd9992c6b7470720b5ac
SHA1

e064d97d1afbd3e32c102c7c606cdf9e80b4e3a8
SHA256

042b4bec085af1a97baa9828ce6c4d975da897cf3a378d0d0e80dca8aa1382f6
SHA512

8243e3ce843df34f84885fb187a6010a02dcc1c31053a9455942268d8041c402fdddf94ac115bdbb4ad51bbf63d7ef43ac386383fd88d83137c8d865360532e7
SSDEEP

1536:xEdYx6QnBloYQcqN1+t501pTjtkP0pzHrlFAREEP7VtmmH+OOBmQA:j6MvxqNItWtkMpzLHHEjqmH+OOBmQA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
042b4bec085af1a97baa9828ce6c4d975da897cf3a378d0d0e80dca8aa1382f6

Files

042b4bec085af1a97baa9828ce6c4d975da897cf3a378d0d0e80dca8aa1382f6
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE