85a6620dd13aa8f5f6cddb11fae02efd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85a6620dd13aa8f5f6cddb11fae02efd
Size

370KB
MD5

85a6620dd13aa8f5f6cddb11fae02efd
SHA1

9c68b525f6a2e4f887611903a5f87f708c660b5e
SHA256

06b339b2b4a0002a81a17b7117e4b0953d1fd6dcace73f16415b1d6e8f00b580
SHA512

bc7677b478d361ad880bed745cd5fcbfd4f5b0764e7ed077abe6fb835664ef7e4c2bb2a5c492ed459c5b32a293519d885837e90b7ea12eac4b7602440292e9fe
SSDEEP

6144:+ZGyC2Cy8fumy5UGR6go/pnGSBR0HfYHkImafR7pgXcHBf5NUpY/HzERKK:+M52CFumQUGQgoRGM0HfYAkRZd5mW/Hg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85a6620dd13aa8f5f6cddb11fae02efd

Files

85a6620dd13aa8f5f6cddb11fae02efd
.exe windows:4 windows x86 arch:x86

451a10f11b9b6be14c3ef8dd372453bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
LocalSize
ResetEvent
InterlockedExchange
GlobalFree
GetDriveTypeW
LocalFree
GetExitCodeProcess
GetPrivateProfileIntW
lstrlenA
GetModuleHandleW
GetACP
ReleaseMutex
CreateFileW
CloseHandle
GetMailslotInfo
FreeConsole
ReadFile
VirtualAlloc
FindVolumeClose

user32

GetClientRect
CreateWindowExA
GetSysColor
EndDialog
GetDlgItem
CallWindowProcW
IsIconic
GetCursorInfo
DrawStateW
GetKeyboardType
DispatchMessageA
SetFocus
GetClassInfoA

dsprop

ReportError
CheckADsError
CheckADsError
CheckADsError
CheckADsError

desk.cpl

InstallScreenSaverW

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 360KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ