85985af8c2dabc0156dcb321bebac8e59f9a24c8bbd1aab012ab1f6a7c7bb7f6 | Triage

Sharing

General

Target

85985af8c2dabc0156dcb321bebac8e59f9a24c8bbd1aab012ab1f6a7c7bb7f6
Size

36KB
MD5

2d1bee1dac242a2852b9c6625e6ca5d7
SHA1

55562f249d84d125f63b4c3001c98e0f2255e08e
SHA256

85985af8c2dabc0156dcb321bebac8e59f9a24c8bbd1aab012ab1f6a7c7bb7f6
SHA512

e9e2e51e176b9e597755724328c19ee381d993f0764a423507390cbe450be19281b47741cdc14f37fbbffb9167c172093a0dfb666db3fba8f40ac3030a5a5fbc
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNh5:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85985af8c2dabc0156dcb321bebac8e59f9a24c8bbd1aab012ab1f6a7c7bb7f6

Files

85985af8c2dabc0156dcb321bebac8e59f9a24c8bbd1aab012ab1f6a7c7bb7f6
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE