85072c4641f88f0adcc845fb55e0bd3b0961271f217d7802449eb04cc766c364N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85072c4641f88f0adcc845fb55e0bd3b0961271f217d7802449eb04cc766c364N
Size

18KB
MD5

8bde866af0e379fa8f5498b4db0f5c20
SHA1

f36dd37beb2f00b106808b7734f9ed9ba319d9d8
SHA256

85072c4641f88f0adcc845fb55e0bd3b0961271f217d7802449eb04cc766c364
SHA512

45332098008e53aa9c229231a7776d7f9ebb1859442568b312b0acdaa5cc4ca8100ccd90a74a513b30e969c401feaff15f40286ae66e4af7daf16e427953edf8
SSDEEP

192:6vCgf7xOsn8gaHDXYlpnIVNlOfOirxqyvl8LmUTrsuxPH/:6v7fwTYjkNoFl8LmA4ux

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85072c4641f88f0adcc845fb55e0bd3b0961271f217d7802449eb04cc766c364N

Files

85072c4641f88f0adcc845fb55e0bd3b0961271f217d7802449eb04cc766c364N
.exe windows:5 windows x86 arch:x86

4af6f93514453d567bd86383ce4074b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
SendMessageA
SetWindowTextA
GetActiveWindow
TrackPopupMenu

kernel32

HeapAlloc
GetProcessHeap
LoadLibraryW
GetModuleHandleA
CloseHandle
GetCurrentThreadId

comctl32

ImageList_Add
ord17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ