85d2dba3e1c9d0b4fa2cdf617091e9161e5976fc49342c48c5430b6c8901e463 | Triage

Sharing

General

Target

85d2dba3e1c9d0b4fa2cdf617091e9161e5976fc49342c48c5430b6c8901e463
Size

1.7MB
MD5

a863b374843aee46f9aa4601f3eb70b8
SHA1

9f3d3dd8f5b5c0f4592f6ebbfdeddac225384411
SHA256

85d2dba3e1c9d0b4fa2cdf617091e9161e5976fc49342c48c5430b6c8901e463
SHA512

79ca00e974a0d9111e21acf31fe08217af7b0abbdcdde823c7dd698ca98a35539b761b5ce4e2f809221c3d1403035a1ffcaed5364745cd3d5bd040b6b55f865a
SSDEEP

24576:4UAbEYJ3681Z4vqrKox4yWMua6NUaBQpXm4EM+lSQqjknZqK2JpE+MSHtOPUK6bV:451684IxCyhT1EMWnsEJwbcxCPx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85d2dba3e1c9d0b4fa2cdf617091e9161e5976fc49342c48c5430b6c8901e463

Files

85d2dba3e1c9d0b4fa2cdf617091e9161e5976fc49342c48c5430b6c8901e463
.exe windows:4 windows x86 arch:x86

2eabe9054cad5152567f0699947a2c5b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrcpy

Sections

Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xonwpbwp
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rmkqykcd
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.taggant
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE