06f56e41516c6cebe7172d54373ac10f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06f56e41516c6cebe7172d54373ac10f
Size

124KB
MD5

06f56e41516c6cebe7172d54373ac10f
SHA1

db9e3b4f83e816f3832633213d1a0e2217671239
SHA256

eb02eafbafdd5239e504ff18c9a7c120179a62a23fee4b5c37c0d442c0f93057
SHA512

217bac6599c75ed25b65f44289f833bde57d8bd2a1d2d34629da7056eae1808ffe8c07a2a13e53ae5f058b66ad75d12e178e863b8a4038c08a97fe9227510fc3
SSDEEP

1536:S93xxS+Cu9eU5WQcnqqd8A9gZ9Jxpswqh88PtGesfCXgL+oXfVRFuM2XFPPGCWiY:+WieUw9kA9E5E88PtGHf9fV3uhXZPAYk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06f56e41516c6cebe7172d54373ac10f

Files

06f56e41516c6cebe7172d54373ac10f
.exe windows:5 windows x86 arch:x86

2be92c916ee50e1d091b7082c9de355e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
GetModuleFileNameA
WaitForSingleObject
GetModuleHandleA
FormatMessageW
GetModuleHandleA
QueryPerformanceCounter
VirtualFree
GetCommandLineW
VirtualAllocEx
SleepEx

user32

GetMessageW
LockWindowStation
ShowWindow
DestroyWindow
SetTimer
GetSystemMetrics

gdi32

GetObjectW
DeleteDC
CreateCompatibleDC
SelectObject

Sections

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ