fa85f638609a7ace144ac0700d2f8f91 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa85f638609a7ace144ac0700d2f8f91
Size

813KB
MD5

fa85f638609a7ace144ac0700d2f8f91
SHA1

6e636df417c58b33569d08404207ab309b7af7fc
SHA256

908e336717424e3e4d54f93ae7c7a69c25ecd15fdf15e853fab8d20e48d6b469
SHA512

b53c967174a2bbfb740cf887caf28ed33f8a94702a3cc45fee77cf64a82e854c887023a2126a3252ff400cd33bede8cddf1d2753f847ba5755f7f6db6de82f7d
SSDEEP

24576:N/NsQWPxLBbJCWkJMLiUu03OjBB31jelS6v:NS5PxX/kJMvf3WXYEq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa85f638609a7ace144ac0700d2f8f91

Files

fa85f638609a7ace144ac0700d2f8f91
.exe windows:4 windows x86 arch:x86

f11e9d4d13adce455955d23c821ca39d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
GetStdHandle
LocalUnlock
LocalLock
IsBadReadPtr
LoadLibraryExA
WaitForSingleObject
FindClose
CloseHandle
GetACP
GetConsoleCP
FreeEnvironmentStringsA
CreateFileA
CreateFileMappingA
GetLastError
LocalFree
IsDebuggerPresent
TlsGetValue
GetModuleHandleA
HeapCreate

user32

GetDlgItem
GetIconInfo
PostMessageA
IsWindow
CascadeWindows
DispatchMessageA
CreateDialogParamA
CallWindowProcA
ScrollWindow
GetMessageA
SetFocus
GetDC
DefWindowProcA
DrawIconEx

msasn1

ASN1BERDecBool
ASN1BEREncLength
ASN1BEREncFlush
ASN1BERDecEoid
ASN1BERDecCheck

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ