85fe127b3c6018eae6cf51d8719c3ff0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85fe127b3c6018eae6cf51d8719c3ff0
Size

58KB
MD5

85fe127b3c6018eae6cf51d8719c3ff0
SHA1

06d3ca9813b9d4297570a85161ef697407b27dd8
SHA256

5eadbb2a1cdd508c106b08a6b22e493eb3b042254ec13e181d5dc90ef11c28ee
SHA512

df7bd889cb5ab3fed0a64f45bff6b32da0f8b31959d423fd8c9680976584572eb3a723beabbc2ad42b37c0ee8499adcddb664be0f0c0721c1b8e39e640d6e81c
SSDEEP

1536:K/lanWBqSX/l6mNTEdc0u6iSRUxY3k3K4DEJ6:KNaeFX/l6mQc0MSqWADw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85fe127b3c6018eae6cf51d8719c3ff0

Files

85fe127b3c6018eae6cf51d8719c3ff0
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE