06b4d5e8ff9fd439ddfd17ed1de21955 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06b4d5e8ff9fd439ddfd17ed1de21955
Size

36KB
MD5

06b4d5e8ff9fd439ddfd17ed1de21955
SHA1

31654b3a6f7aa1e586b9901348bbc5de26a665c2
SHA256

3b815e97f624e34294ccacea33d73c8f06901e099387cd92f288eca570cb2e7f
SHA512

29143500ca797474e0beec9b278ce637f1c2206e6fe121daaa1bbfc2b675b4dd45fb63da8c78169060b8069fc31f1223a00d6caaa22d8f3c5ba9333d30ef8581
SSDEEP

384:0zupvEeoRjQI23CdbKeBNzTW7C91mKdyUlXz84t6:0svEztl4EN5MKdhlj84t6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06b4d5e8ff9fd439ddfd17ed1de21955

Files

06b4d5e8ff9fd439ddfd17ed1de21955
.exe windows:4 windows x86 arch:x86

a6dda644aec921baa6b11777d5b9435c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
Sleep
WinExec
GetVersionExA
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
GetStringTypeW

user32

wsprintfA

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE