585da255201c3bbea078611020f08d64 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

585da255201c3bbea078611020f08d64
Size

634KB
MD5

585da255201c3bbea078611020f08d64
SHA1

15ad534a578a655960fe08dd2991c0e5cbf947ae
SHA256

89e6f5e4c7afae9b24af020c3f8d32d51caff149ece35ac0980a8121378a0359
SHA512

a0ef967c1ee9c27e9b2241e69defcdc60673e8b31e5fdcaccda2cc493ac3c7f5ab2447c996ef7b71ec2fbdca0570f0505d3ae5f4a1d4de0be19bb69d84a99341
SSDEEP

12288:lJe/cG76F93bLa65L2NczI9ORdJ8Cer30ZY4QoU25mTjWB+FTYjc:ica6DLLa6FzI9ORdOCeAZYPtjWB+Fc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
585da255201c3bbea078611020f08d64

Files

585da255201c3bbea078611020f08d64
.exe windows:4 windows x86 arch:x86

01eb4f4afa2868679503d8f107d7f83d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetErrorMode
RaiseException
ResetEvent
LoadLibraryExA
VirtualProtect
SetEvent
EnterCriticalSection
GetLogicalDrives
CloseHandle
Sleep
GetSystemDirectoryA
GetLastError
GetLocaleInfoA
GetACP
GetStdHandle
InterlockedExchange
GetCommandLineA
FindFirstFileA
GlobalFree
ReleaseMutex
HeapCreate

user32

DrawTextA
ValidateRect
FillRect
wsprintfA
GetClassNameA
SetForegroundWindow
ShowWindow
BeginPaint
FlashWindowEx
GetActiveWindow
GetWindow
FrameRect
EndPaint
GetParent
GetCursorPos
IsIconic
GetFocus
GetWindowTextA
ReleaseDC

httpapi

HttpTerminate
HttpInitialize
HttpAddFragmentToCache
HttpCreateHttpHandle
HttpAddUrl

winhttp

WinHttpOpen

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ