85cb7f0893ab2193517c606290e0d28c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85cb7f0893ab2193517c606290e0d28c
Size

3.9MB
MD5

85cb7f0893ab2193517c606290e0d28c
SHA1

5820be8532c639ca3d68298f74495b96ee6b5a3b
SHA256

885c4a5d0c23fefa0a2fc908a8e38a229f6c01c74aa768cb3387fd039edd8c1e
SHA512

3aff04ac7c71b6ac19bb54429c53bc8ad779a99c900c070baa67613bf90affc89d93b73dfc2e9257312f380297276b6bec31993eee31d97566aceab5a05984f5
SSDEEP

98304:1XhXHwk21vPyQfTG5NvJu3qwKlhzkjAoLNTgN4wf5MSdz5dcsf:1x3f2NdfTIJuXYybpTgN9eSdtdL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85cb7f0893ab2193517c606290e0d28c

Files

85cb7f0893ab2193517c606290e0d28c
.exe windows:4 windows x86 arch:x86

42d6fb09fa734426e4d276886a975da2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles
ExitWindowsEx

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

.text
Size: 24KB - Virtual size: 8.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE