42fada21aa5fa9ee940b7d24d383ab1a41d6053c10a5c8bd85a83ecfdc384abdN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42fada21aa5fa9ee940b7d24d383ab1a41d6053c10a5c8bd85a83ecfdc384abdN
Size

40KB
MD5

a8b7629f622eafe3c2b6bed35e0fbf40
SHA1

41319d6bcd18a184a0fd823f59b2e284070788fd
SHA256

42fada21aa5fa9ee940b7d24d383ab1a41d6053c10a5c8bd85a83ecfdc384abd
SHA512

140af53aa3a70b4bd93895e9bd2305fd29710afd45c0b3e6a840304e3948035081b814ab56faffd8e8addaf91409fde5451f4c5ae74096b0ec03b6a7c40fd631
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNh9:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42fada21aa5fa9ee940b7d24d383ab1a41d6053c10a5c8bd85a83ecfdc384abdN

Files

42fada21aa5fa9ee940b7d24d383ab1a41d6053c10a5c8bd85a83ecfdc384abdN
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE