42WFo3FaTHYyBEwuU2uDHxNr[.]exe | Triage

Sharing

General

Target

42WFo3FaTHYyBEwuU2uDHxNr.exe
Size

7.6MB
MD5

98f743c21a83ff1ebb7a55b3d32ac099
SHA1

e715b3eb8a3518369d20012533d4cc8eb8950749
SHA256

e880e19545c1a04e0cced43714c2c027fa1cc8558499091dae57a3675b9fc82c
SHA512

5fe640e5c9b6bc9dc8ace041b20ce5b9f1190b010aeabc13e17310220ec4352e025b22d9a2ec876a83e0bf8088e4b30cd7e43dd9a47904d6df9b639bfba39452
SSDEEP

196608:DnIjlo7SWx8ktMWfDsRhcI76Mrmaa6t9BHKNPv/94s23rG04BbpmBj:DIhoeWxwW7sRhr6Mrmaaq9BqN3/9oZ0S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42WFo3FaTHYyBEwuU2uDHxNr.exe

Files

42WFo3FaTHYyBEwuU2uDHxNr.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ