85987b5291b505040f3c0a81a57e91bfddcfc99243578dc9671e1669c76a66ea | Triage

Sharing

General

Target

85987b5291b505040f3c0a81a57e91bfddcfc99243578dc9671e1669c76a66ea
Size

63KB
MD5

57341dfae1ded754da240b3a5c036832
SHA1

0ff8a48a292d4706f434f92f13684f07e67cae97
SHA256

85987b5291b505040f3c0a81a57e91bfddcfc99243578dc9671e1669c76a66ea
SHA512

0325bc2beef3e41cb1ac410b2da57aee369f5abaa919fa49fca356311d91a4d3d18aab1b9152323c33409a83b953e72292c6674d4ea1467b1fdba3fbcde4ea41
SSDEEP

1536:e6D/hiVmSFIDQoLucDZAkFu/Mg2ob0TvN4i5AEK8aPKbYervhQx:e6D/EUjcoLucNk/Mg/bSvN95AE0PQvh6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85987b5291b505040f3c0a81a57e91bfddcfc99243578dc9671e1669c76a66ea

Files

85987b5291b505040f3c0a81a57e91bfddcfc99243578dc9671e1669c76a66ea
.exe windows:4 windows x86 arch:x86

9db377dfdb47b4ba701b15b306a9fa02

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnlockFileEx
GetCPInfoExA
RtlZeroMemory
BaseCheckAppcompatCacheExWorker
GetSystemPreferredUILanguages
CreateJobObjectA
GetConsoleHardwareState
ConnectNamedPipe
DefineDosDeviceA
GetCurrentApplicationUserModelId

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE