85b592906be495932fada9b1b2ca6fba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85b592906be495932fada9b1b2ca6fba
Size

24KB
MD5

85b592906be495932fada9b1b2ca6fba
SHA1

5a197e55774a4295c37f942ad25c1e611e78d2dc
SHA256

bdd9c3ddb3259a7a9860e0e9f152c72ec7777a9ab3a0dfa82dbf51eea53e7719
SHA512

5b8cc0dd24ee86558ee6eefecc1e807921521e78e1f3534d2145363f50af96cbd95d691b6f341fffe80ce56c5b7461f7dddebfc614e671d868c4cb18f4ab5d89
SSDEEP

384:78hI9NJbmLd3A4m5HfvYqf8GqcT2QhtXo1Qf:71nidVmpfvY6rxXtiQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85b592906be495932fada9b1b2ca6fba

Files

85b592906be495932fada9b1b2ca6fba
.exe windows:4 windows x86 arch:x86

bee8079b9861e3641a4916edcd425bf4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
CloseHandle
CreateProcessA
GetProcAddress
LoadLibraryA
Sleep
MoveFileA
DeleteFileA
WriteFile
CreateFileA
GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
FreeLibrary
GetModuleHandleA
GetStartupInfoA

msvcrt

isupper
isspace
ispunct
isprint
islower
isgraph
isdigit
atol
??3@YAXPAX@Z
isxdigit
rand
srand
time
__CxxFrameHandler
strstr
??2@YAPAXI@Z
_except_handler3
_access
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
ldiv
sprintf
_itoa

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ