85f59f663a495aa752634efd63192e11 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85f59f663a495aa752634efd63192e11
Size

1.5MB
MD5

85f59f663a495aa752634efd63192e11
SHA1

ac34937eab63e7fb3a025d4e957e68e1a740f7ad
SHA256

9de37c379c6b96c45fb41bba174c9acc50cc3d5898f5dd8598540e64e61da98e
SHA512

5202c64b6bb75c510fca406573cc9f7b0b20f78c932ecaba51dda0250b08012c9ec492d6af8ab239b9c07ef49e94c8c9eceb5bf2cfbc53bb1645fd325787ca74
SSDEEP

24576:utm3s0pOvxUPVSI5Uw5w+ffx2cb5LW9vepfNy1WA2SlOFG87LPiP4xgpmKydh0GO:O1QOvmMp2fEk5LyepfNg1e32Qdh0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85f59f663a495aa752634efd63192e11

Files

85f59f663a495aa752634efd63192e11
.exe windows:4 windows x86 arch:x86

dbea47c0cd6af6c443ef1ef9e0fd8223

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

SHGetFileInfoA

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

shlwapi

SHAutoComplete

Sections

CODE
Size: 1.5MB - Virtual size: 12.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE