b06dcabff968d06a19a2f4d421fbc1682922e9a14b099b3acf3b0e7a0be52586 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b06dcabff968d06a19a2f4d421fbc1682922e9a14b099b3acf3b0e7a0be52586
Size

45KB
MD5

62da363bc0331e1e07288ab42f68e5be
SHA1

e2402695a7b41f842624402999037b066ae406ec
SHA256

b06dcabff968d06a19a2f4d421fbc1682922e9a14b099b3acf3b0e7a0be52586
SHA512

d61a420b14a1ea697c6ae71622b29d36cedf3f4b7434278fd4fa670c9b78f6b772b2ece643822713e9cf75bf120da3a506df74ec04d3223ab2975decafe5f848
SSDEEP

768:67eQYIAatE/iLG9KqVuqrTsv03RAK6vWUKFObG194QH6b5:uY3atE/ik7Vuqr4vUSK6eUKFOhQH6b5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b06dcabff968d06a19a2f4d421fbc1682922e9a14b099b3acf3b0e7a0be52586

Files

b06dcabff968d06a19a2f4d421fbc1682922e9a14b099b3acf3b0e7a0be52586
.exe windows:4 windows x86 arch:x86

dd065d9ceef69d54f7795bb82426cedf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
CloseHandle
WriteFile
CreateFileA
SetFileAttributesA
Sleep
GetCommandLineA
HeapFree
HeapReAlloc
HeapAlloc
ExitProcess
GetProcessHeap
GetModuleHandleA
IsBadReadPtr

user32

TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
GetMessageA
PeekMessageA

msvcrt

_ftol
strrchr

shell32

ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 766B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ