db06fa7c0a5ab074cf36bd69946479112e87a5d97f5056454a1b4a1058e07e79 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db06fa7c0a5ab074cf36bd69946479112e87a5d97f5056454a1b4a1058e07e79
Size

1.1MB
MD5

2592a793c9e406a527aa30bdf771e44e
SHA1

5dedcbcad9bf81a5c177ec0e1d709bc5acdaafda
SHA256

db06fa7c0a5ab074cf36bd69946479112e87a5d97f5056454a1b4a1058e07e79
SHA512

e520382224b10f91f096c9159cc6c1adcd483833586b1298fa1803f26b627b692d8c003d6ed43606f1657590a45892d309ad3329352b327bd97f71df72847b41
SSDEEP

24576:cd2BTBbKcCbVL/WJCb8kpO4z3gm9BtUNA+N9:cdc9KcCxicY2RzwmTSlN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db06fa7c0a5ab074cf36bd69946479112e87a5d97f5056454a1b4a1058e07e79

Files

db06fa7c0a5ab074cf36bd69946479112e87a5d97f5056454a1b4a1058e07e79
.exe windows x86

016f62665865dc27c21165131973803b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegCloseKey

user32

CharLowerBuffW

ole32

CoInitialize

oleaut32

GetErrorInfo

Sections

.text
Size: 852KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 227KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE