85c0a4c5e6fead74526015f2a1b9656d | Triage

Sharing

General

Target

85c0a4c5e6fead74526015f2a1b9656d
Size

135KB
MD5

85c0a4c5e6fead74526015f2a1b9656d
SHA1

d1ddf97469e8fb3c92f17e9ce897995410fc54af
SHA256

14ea5e94d840e16f6fd573f41a7ee6d959e305b28544ad2d984e73f23fb3994c
SHA512

961ef3452d06090002a9a1c6ee767ecaec9a59ac27873a119a9998cafea557c575ddfa966b2cec758e1519fe7908746ce3078b87f277aa6a477016e7de9e4701
SSDEEP

3072:a85Xu6QoBkdU05oROUPtwPMi7QChYKqwJcsNofD:a85XuvouFoRDpeYKFJcCof

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85c0a4c5e6fead74526015f2a1b9656d

Files

85c0a4c5e6fead74526015f2a1b9656d
.exe windows:5 windows x86 arch:x86

2c6db2a78afd4c7e5e5ec3651f098ce1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documets\Build\Build23.pdb

Imports

advapi32

OpenServiceW

kernel32

GetModuleFileNameW
GetModuleHandleW

comctl32

PropertySheetA

Exports

Exports

SetCertificate
GetCertificate
?RonFon12@@YGPAEPAXJ@Z
?RonFon13@@YGPAEPAXJ@Z
?RonFon14@@YGPAEPAXJ@Z
?RonFon1@@YGPAEPAXJ@Z
?RonFon2@@YGPAEPAXJ@Z
?RonFon3@@YGPAEPAXJ@Z
?RonFon4@@YGPAEPAXJ@Z
?RonFon5@@YGPAEPAXJ@Z
?RonFon6@@YGPAEPAXJ@Z
?RonFon7@@YGPAEPAXJ@Z
?RonFon8@@YGPAEPAXJ@Z
?RonFon9@@YGPAEPAXJ@Z

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.auput
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.euput
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.esput
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ouput
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 101KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ