06b544031b845c554924ccaf13e81280 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06b544031b845c554924ccaf13e81280
Size

762KB
MD5

06b544031b845c554924ccaf13e81280
SHA1

ab79ca2b3adab2ad616e921aa4bb43f8d7b7bee7
SHA256

e7d8535892f9d22aee9053bf8b982ea864fbc6dfad9a5b545e47631a30a6cad7
SHA512

3c9124fcb11857078eac57f397d11029eb7f1b17e1e27a53ff03dcb3624c8f5e6b1b2f83a27fc2edcd2b7e3bdcda80d584cca4bb9282a67f4a7943ca3be0fa60
SSDEEP

12288:7OKRhz0pXYsaWa4IxJupWCBGjp0mEftt/VyhlcomqG1w:n4pX0tJbCOh0t42vfq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06b544031b845c554924ccaf13e81280

Files

06b544031b845c554924ccaf13e81280
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 828KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2feipuro
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

j.18mzuc
Size: 467KB - Virtual size: 468KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fqjdvx06
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 289KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ