85bc2e9ff418ae4f4aa0a70cb5203c05 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85bc2e9ff418ae4f4aa0a70cb5203c05
Size

80KB
MD5

85bc2e9ff418ae4f4aa0a70cb5203c05
SHA1

6b9346f843e4c8412839d87fbad8de0649c479cf
SHA256

590642e9a2a8d2fcc2ef4bef51c88110e942f2b5f556cc5a13e34647279f7d7a
SHA512

cf512252e82bb86bf58036d487b59b585fb0b83c0fffcaedb6541f2918aa5e34449585dcef4623ca598fa6a2d05841114647580b940370849cd23f0b556e2f01
SSDEEP

1536:yo4cpdbDBKI72ZjAFt70uibQ2euYi7nXIZ44XCyZcK:r4cvHBj2Zut7Jijln7nA4S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85bc2e9ff418ae4f4aa0a70cb5203c05

Files

85bc2e9ff418ae4f4aa0a70cb5203c05
.dll windows:4 windows x86 arch:x86

a249652b606dcd37e4836a9bce0a4beb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
Beep
InterlockedExchange
Sleep
InterlockedCompareExchange
HeapFree
RtlUnwind
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
HeapAlloc
SetLastError
UnmapViewOfFile
SetFileTime
GetFileSize
GetFileTime
CloseHandle
CreateFileA
MapViewOfFile
CreateFileMappingA
SetEndOfFile
SetFilePointer
HeapDestroy
SetErrorMode
LoadLibraryA
GetModuleFileNameA
GetProcAddress
DeleteFileA
GetLastError
ExitThread
GetProcessHeap
EnumDateFormatsExA
ReplaceFileW

Exports

Exports

fdjncixw

Sections

.code_01
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ