42fdc7b38d1057e4f7e507e85a42624f40ab98680aafccc009f6bc152a92b578 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42fdc7b38d1057e4f7e507e85a42624f40ab98680aafccc009f6bc152a92b578
Size

120KB
MD5

ca57a48e2b7abc6c8931bfc5f17adb16
SHA1

5b00051a3ea415ba0d1107611efd5fc347cb93db
SHA256

42fdc7b38d1057e4f7e507e85a42624f40ab98680aafccc009f6bc152a92b578
SHA512

acbbeca7ee2c8b4e8236ea2139c40d4e63b2372796d4b55ea2ca653c7661218cb118d8f2be1b719919f133a8f099ed0b6163f5887fc8980c304f99d0c87172c1
SSDEEP

3072:pXscxalZc4PIJFE7+q5aURiyeMfa+DZwRxZVBynfKmF:pXxaoaJ7/5agjfLDZqbW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42fdc7b38d1057e4f7e507e85a42624f40ab98680aafccc009f6bc152a92b578

Files

42fdc7b38d1057e4f7e507e85a42624f40ab98680aafccc009f6bc152a92b578
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ