85d4fc852d2a51c60f2b05406ffa04f8

General

Target

85d4fc852d2a51c60f2b05406ffa04f8
Size

39KB
MD5

85d4fc852d2a51c60f2b05406ffa04f8
SHA1

66cd081048b1fba2a98349e601c91e94e8d83ec3
SHA256

477c9f9ee41b5cbabaebb6e0f3b6a200947f6813b8084b4d0f01aa64f7cc892e
SHA512

b942e9c3ac9cc821e738bde29c827a9aeca3c114b6f96fe2af08f2671b230dfbcc15286e637d2c125d417664a792fe11688c29564d23d995707fa8a4a6bcb934
SSDEEP

768:Vf/CBc+O81WZn22dYgXJTEKPEOSJ9iTytF3460:Sc+O81WZ22dYgXFEKPqW2tC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85d4fc852d2a51c60f2b05406ffa04f8

Files

85d4fc852d2a51c60f2b05406ffa04f8
.exe windows:4 windows x86 arch:x86

6036a21d31015dde7be39bd8e59f64a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

EnumProcesses
EnumProcessModules
GetModuleBaseNameA

kernel32

LoadLibraryA
lstrcatA
lstrcpyA
GetFileAttributesA
SetFileTime
CloseHandle
GetProcAddress
CreateFileA
Sleep
LocalFree
WideCharToMultiByte
lstrlenW
GetCommandLineW
ExitProcess
GetFileTime
GetModuleFileNameA
GetTempPathA
GetUserDefaultLangID
GetCurrentProcess
FindClose
FindNextFileA
GetModuleHandleA
lstrcmpiA
OpenProcess
TerminateProcess
ReleaseMutex
WaitForSingleObject
CreateMutexA
lstrcpynA
lstrcmpA
SetErrorMode
lstrlenA
GetStartupInfoA
GetLastError
FindFirstFileA

user32

CreateWindowExA
DispatchMessageA
wsprintfA
ExitWindowsEx

advapi32

AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA

crypt32

CryptUnprotectData

shell32

CommandLineToArgvW
SHGetFolderPathA

ws2_32

recv
WSAGetLastError
inet_ntoa
ioctlsocket
inet_addr
accept
listen
htons
gethostname
gethostbyname
bind

msvcrt

??3@YAXPAX@Z
_exit
_XcptFilter
exit
_strdup
_acmdln
__getmainargs
_CxxThrowException
__setusermatherr
time
_initterm
_strcmpi
_controlfp
??1type_info@@UAE@XZ
__set_app_type
atoi
__p__fmode
__p__commode
_adjust_fdiv
_except_handler3
toupper
strstr
strlen
abort
strchr
isspace
malloc
fclose
ftell
fseek
fopen
fwrite
fputs
fread
memset
sscanf
strcpy
free
strcat
abs
strrchr
strcmp
system
printf

oleaut32

GetErrorInfo

Sections

.bss
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6036a21d31015dde7be39bd8e59f64a5

Headers

File Characteristics

Imports

psapi

kernel32

user32

advapi32

crypt32

shell32

ws2_32

msvcrt

oleaut32

Sections

.bss Size: - Virtual size: 104KB

.data Size: 38KB - Virtual size: 37KB

.bss
Size: - Virtual size: 104KB

.data
Size: 38KB - Virtual size: 37KB