06b749ab044cf3212c6c50fc243c9064 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06b749ab044cf3212c6c50fc243c9064
Size

804KB
MD5

06b749ab044cf3212c6c50fc243c9064
SHA1

5dc1def48a25869043feb93947a79ef426b6ca4c
SHA256

e8ba7722aa8467bfee09a3c6b1265a04832b68fc896c48a38a03902d970b4171
SHA512

dd18a978b8e8832152f17c3189eaab9e4f43a42cd222ebd000ddfa7e89b94e1ff81eedc8b6f8911e50472d30ab44ebdcddcf38333b6d72aac8352b6d09e86dc5
SSDEEP

12288:TBKoGW90fMZHTcCJlo40Dli8CldBqRQ7YV0kqm+FTXh0pQo7wqTXVQ7sYeiPDQVb:TBKoG6nloJoAQ80kAFjqRHTXaei7QN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06b749ab044cf3212c6c50fc243c9064

Files

06b749ab044cf3212c6c50fc243c9064
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

Size: 264KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 548KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.x01
Size: 512KB - Virtual size: 548KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Wheeeee
Size: 16KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE