85e925afa3969f1438837689326357d8 | Triage

Sharing

General

Target

85e925afa3969f1438837689326357d8
Size

17KB
MD5

85e925afa3969f1438837689326357d8
SHA1

5b0d58c5ca2c4efcf18c20df319f4f6482f74f10
SHA256

636e9ea29e7d01fd9c8e436a0504274a63eb9ad00225f06af05a18a9681d881e
SHA512

2b364a1e1cce531d0bb3001fa967e26c2d8349583d18a14797129c2ff2ec2a7d68f65c469d9d6d73039190d5c5ab0328c898f070cab21897a8489e9ac08ba961
SSDEEP

384:WSuKUJE11YCkIIugmF4P8DUKmN4iOcz9f5c4O:XDUWYRGW8dmOwjVO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85e925afa3969f1438837689326357d8

Files

85e925afa3969f1438837689326357d8
.exe windows:4 windows x86 arch:x86

4813f4b9729b86b936e79fce29b199e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
LoadLibraryA
GetFileTime
SetFileTime
Sleep
WriteFile
lstrcatA
lstrcpyA
lstrlenA
ExitProcess
DeleteFileA
CreateProcessA
CreateFileA
MoveFileA
CloseHandle

shell32

ShellExecuteA

advapi32

RegCreateKeyA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegOpenKeyA

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 726B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ