85c123af8631b82d07a8048faeba91d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85c123af8631b82d07a8048faeba91d2
Size

278KB
MD5

85c123af8631b82d07a8048faeba91d2
SHA1

0489c56cc4846a628b1c19ea5ace8fb8d1b90854
SHA256

67fb640b8a327a94a61149fbeb53b1675f636ddf9df26956c752c8f3b4903298
SHA512

f9ab7d30b1821092a6c5c846b33dabc2d647dcd0b5e83650ef2a51d90de8bd18f54659b663d674abbd7a66d27d8809c5ec5157cae6a3ddcfca7dd706265f7437
SSDEEP

6144:clL7BjV31VeH2Iiv9u4Qy2IM7/xbonYyoQ0lZqj5T:ctN51Vuc9HQy2j/wIkj5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85c123af8631b82d07a8048faeba91d2

Files

85c123af8631b82d07a8048faeba91d2
.exe windows:4 windows x86 arch:x86

f10b6a0b679bbbfca1f638d4a0df6aa5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

kernel32

GetCurrentProcess
GetSystemInfo
GlobalAddAtomA
VirtualQuery
SetFilePointer
SetEndOfFile
VirtualProtect
GetOEMCP
RtlUnwind
EnumResourceNamesW
HeapFree
WriteFile
ExitProcess
GetVolumeInformationA
ReadFile
FlushFileBuffers
HeapAlloc
FindAtomW

comdlg32

ChooseFontA
GetOpenFileNameA

ole32

CoCreateInstance
CoTaskMemFree
CLSIDFromString
StgCreateDocfile

setupapi

CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

Sections

.text
Size: 141KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ