085d5fe7e82bdedc2e37128724d29b3d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

085d5fe7e82bdedc2e37128724d29b3d
Size

76KB
MD5

085d5fe7e82bdedc2e37128724d29b3d
SHA1

67d9205de07750d398232ee5f4ba0a0b4e78796a
SHA256

2ca003aca4633809ca81dc007f2b60b596e37fdd395be84e8895b233323c0b37
SHA512

431a5f5f0538af6b4508e8efcc647d94c2805c3aa1ef52df7cbcb0eb6b7fbe67b20c419df144d849daca8e0df554b08abfd58d5072cd03bcfbf255eefc79c896
SSDEEP

1536:1RRROiylTNpSbLLqVp54f+Dnh6zRhwrmy8gpjVrs2ryrd1vUQuq6:1RRRODDSL84+2wrmy8gHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
085d5fe7e82bdedc2e37128724d29b3d

Files

085d5fe7e82bdedc2e37128724d29b3d
.exe windows:4 windows x86 arch:x86

843a03a81633901bf6c9f170749d5e3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTapePosition
QueryDosDeviceA
lstrcmp
WriteConsoleOutputW
WritePrivateProfileStructW
EnumSystemLocalesA
FileTimeToDosDateTime
GetFileSizeEx
GetSystemDirectoryW
GetConsoleCharType
FormatMessageW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE