06f68252160ec2ffe9d857b7ab41e90d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06f68252160ec2ffe9d857b7ab41e90d
Size

317KB
MD5

06f68252160ec2ffe9d857b7ab41e90d
SHA1

755edbc668d64bc16dae3b6e3edd83ae060bcbab
SHA256

63af850a0eb1f868770f77b42a635e94b51bf0c4b1656c27999794ebe2cff000
SHA512

6ff740b335e24f63aea2c04e045283b3bc2100cbd8fd01c763e55561cf134e70d64f7344c021fba8e8c9060482d9cc359e84d1f91bda905c4c1b57e1aeb1c255
SSDEEP

6144:DfTlVgX0zmGfMNIpWgxwM0SY2wjMnxMzQ4PocVsuokL:/XgklMNIwgxwlR2wjMnxMzQ4PocSuokL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06f68252160ec2ffe9d857b7ab41e90d

Files

06f68252160ec2ffe9d857b7ab41e90d
.exe windows:5 windows x86 arch:x86

f726bd7f1f33fe7f5b219a2a5b49f3c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
CreateNamedPipeA
GetProcAddress

Exports

Exports

koivflxlhk
qglzxnzw
uzustyxfjhftcum

Sections

.text
Size: 303KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ