85fbc121d5c529211038e9dc30ddc6f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85fbc121d5c529211038e9dc30ddc6f5
Size

213KB
MD5

85fbc121d5c529211038e9dc30ddc6f5
SHA1

d5a93d4e8302956d3c30830d70f0e3a4c78ceff1
SHA256

8c48e98d6c5505c93c30caa9171e53942ddba05168526f87e4242c034b4b756f
SHA512

e29c3e2af20e7e91ffad8e01b734d3311361e793588321f6975ae042c6bc43281137315fa64fa750ddc2636e93eda6589390a4746590bb2331aa65d695a883ff
SSDEEP

3072:IXzYq4x55967RdBbWu8f2zB541RXT3kQ1Swx9ltZv2Bg8H:Mmx559mByBf2158RbhJ2DH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85fbc121d5c529211038e9dc30ddc6f5

Files

85fbc121d5c529211038e9dc30ddc6f5
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Documents and Settings\Administrator\My Documents\Visual Studio Projects\resource\Debug\resource.pdb

Sections

.textbss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE