85afc2437ab31b8cb27114842d95e63c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85afc2437ab31b8cb27114842d95e63c
Size

6KB
MD5

85afc2437ab31b8cb27114842d95e63c
SHA1

7b806388621681d3971f2ae3cbc39d85376cb7eb
SHA256

7ef1678025146738096ab65d85f32d282574deca5aff6e8ed04b179530dd2587
SHA512

dd3e0dadadfae2ca3d8f4736df0d5574ea5f51ce84c371631b226c78415bb364193ac65e36f9fcbca71b3de5c552ffe54147e60ad05856e28b7fcc6f6443deb0
SSDEEP

48:6jkANCVtewyJaoX0i7D/0Cj7aSrwmkNUANeOCincvs5dQXwDYH2+hmZuYFScgUGX:lduX0iBbrqUeeOCiVPEvw90sItQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85afc2437ab31b8cb27114842d95e63c

Files

85afc2437ab31b8cb27114842d95e63c
.exe windows:1 windows x86 arch:x86

96f5674c2553131184e1fcbff37099e1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetModuleHandleA
GetTickCount
RemoveDirectoryA
RtlUnwind
DeleteFileA

user32

FindWindowA
UpdateWindow
SetTimer
KillTimer
RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
PostMessageA
PostQuitMessage
ShowWindow
CreateWindowExA
DestroyWindow
BringWindowToTop
DefWindowProcA

crtdll

__GetMainArgs
_splitpath
exit
raise
signal
sprintf
strchr

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 84B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE