85d254c1d07e8fe98bbb511c169dbe46 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85d254c1d07e8fe98bbb511c169dbe46
Size

64KB
MD5

85d254c1d07e8fe98bbb511c169dbe46
SHA1

247ceabd3b608a649f2c01018bfc76c0ea88bfdb
SHA256

16e7800a6b780d36a91f6dcfaf33ad59ba8978897c63e28e19efbf557b1d071b
SHA512

65a947854fb2f52c6e3cb88c13811470c9644f1790079249d56b30f8a4e088716fd8bbe119940ca6595efee6139690f20209f58e3355b8019bbaa01fe7ed31d0
SSDEEP

1536:vIg2eirWbnocotxGzHWKe0ICA1dd8qYSywm/39KEFXvxdqHsM:vXUWbnEGz3euAV8zwm/9X5yh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85d254c1d07e8fe98bbb511c169dbe46

Files

85d254c1d07e8fe98bbb511c169dbe46
.exe windows:5 windows x86 arch:x86

5c297f4c7c60242acff858a0e6b7b2dd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnumWindows
GetScrollInfo
SetDlgItemTextA
GetCapture
SetWindowTextA
RegisterClassExW

gdi32

GetRegionData
GetArcDirection

comctl32

ord17

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

kernel32

InitializeCriticalSection
GetTimeFormatA
GetLocalTime
GetEnvironmentVariableA
HeapDestroy
GetProcAddress
DeleteCriticalSection
FreeLibrary
LoadLibraryA
LocalFree
LocalSize
HeapAlloc
HeapCreate
ResumeThread
LocalAlloc
GetSystemDefaultLangID
GetUserDefaultLangID
GetTickCount
GetStartupInfoA

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ