85b68bebebe2300911c164185348fbd3

General

Target

85b68bebebe2300911c164185348fbd3
Size

220KB
MD5

85b68bebebe2300911c164185348fbd3
SHA1

c12036cde84d2b2fed4d34ec1d74b7d5df2717a8
SHA256

7c53f0d8a2802a599ead2134af59e3b21152d8de61ba8b0110ea0fa35e71cfa9
SHA512

98bef143795cb5e9e8a5c889bd81ad64812265ff9fedfdcb00ff0ed5d9736e22583e348d9ebb7e5de2718ced21c9e0c5b063a63957a2592649c8444e03d5ae3e
SSDEEP

6144:30SlnplOFwHZKT9AUxuvlra/3WdClO9v4E:3F0woTErafQmUvx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85b68bebebe2300911c164185348fbd3

Files

85b68bebebe2300911c164185348fbd3
.exe windows:4 windows x86 arch:x86

343b4f02ab367c78531d0bb91b595ae5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32.dll.

TerminateProcess
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
MultiByteToWideChar
Sleep
GetTempPathA
GetModuleHandleA
SetFileAttributesA
GetFileAttributesA
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
HeapFree
GetCurrentProcess
GetCommandLineA
LockResource
FreeResource
LoadResource
SizeofResource
FindResourceA
LoadLibraryExA
RaiseException
FlushFileBuffers
SetStdHandle
IsBadCodePtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetStartupInfoA
GetFileType
GetStdHandle
HeapSize
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
LocalFree
SetFilePointer
CreateFileA
WriteFile
CloseHandle
WideCharToMultiByte
HeapAlloc
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapCreate
HeapDestroy
VirtualAlloc
VirtualFree
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
ExitProcess
GetVersion
RtlUnwind
HeapReAlloc

oleaut32

VariantClear

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

343b4f02ab367c78531d0bb91b595ae5

Headers

File Characteristics

Imports

kernel32.dll.

oleaut32

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 11KB - Virtual size: 17KB

.rsrc Size: 182KB - Virtual size: 181KB

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 11KB - Virtual size: 17KB

.rsrc
Size: 182KB - Virtual size: 181KB