085caae4e2c4a399d75be3383826b425 | Triage

Sharing

General

Target

085caae4e2c4a399d75be3383826b425
Size

16KB
MD5

085caae4e2c4a399d75be3383826b425
SHA1

02992f62bf2c82a2b3dd40dc38241444d7c45c0a
SHA256

4a414c6741e7ec471836ae2063b975496a905764e94a87e8c021ffaa1fba376f
SHA512

283e4becb872c340c2f81bd720123fb652f82585a295c04b31e10263105848e93476aac47f7e979907327541b38fd76d997d751425d74bab79e7739150a23be1
SSDEEP

384:XRv8zrkWbPZaGvzk7P2LehCW84I9PYQUv05JwC8A5eC+/dVFcNwchkoamNw0cy8i:X98zrkWbPZaGvz0P2LehCW84I9PYQUvk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
085caae4e2c4a399d75be3383826b425

Files

085caae4e2c4a399d75be3383826b425
.exe windows:4 windows x86 arch:x86

8467fdeeb9990e1b1d9388615b53e236

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
DeleteCriticalSection
GetVolumePathNameW
ConnectNamedPipe
lstrlenA
LockResource
PrepareTape
RtlCaptureStackBackTrace
ReadFileScatter
MulDiv
lstrcmpiA
GetBinaryTypeW
EnumCalendarInfoExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE