06ac75ffbcc82be0c783d3109f9e8784 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06ac75ffbcc82be0c783d3109f9e8784
Size

17KB
MD5

06ac75ffbcc82be0c783d3109f9e8784
SHA1

b7e67cefa9a1419f1af2813bb29f1b29bf978098
SHA256

e1e0aedad5ef17716ee7a44fe8314a5ac547519917040a7c8b58afd4e21b491c
SHA512

15b2a999cf0570eaeaff2877747455dd73426dab80e1b3e312255eb913bb432d5f2dbf71c3e746cd5d88626b771ec1d7cbc826fd1c81c503f3b9d1c29b64f416
SSDEEP

384:pTF/2fv+YpcmZO2Zp+Nye8pqrmub8TyztsDN:ZB2eYpoKK8o8TyJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06ac75ffbcc82be0c783d3109f9e8784

Files

06ac75ffbcc82be0c783d3109f9e8784
.exe windows:4 windows x86 arch:x86

1e4c0da5737da53aff5e6e0ab7de1efa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
ExitProcess
OpenMutexA
Process32First
Process32Next
Sleep
CreateToolhelp32Snapshot
CreateMutexA
CopyFileA
OpenFile
CloseHandle
FindClose
FindFirstFileA

advapi32

RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE