06a739ed21032dccdb81b6e4c81d837d | Triage

Sharing

General

Target

06a739ed21032dccdb81b6e4c81d837d
Size

697KB
MD5

06a739ed21032dccdb81b6e4c81d837d
SHA1

779e480666964a752ce5299ce190478567e43416
SHA256

70f2f57bc991b2081f0d36ed107591e5100709781eefb9a97b71bcd58d27cba0
SHA512

82833eb7f3e55af24203e84ce9ea09a802d13011dc518d06e872f6f6cba60bdb773cf50967606aaf4e0be1bfd92b997c58356cfd6f830c9cf70b901e6f1abc69
SSDEEP

12288:4oJBAeMAJeFJiNXvmgW/QAQLG92XOH+gMNzwT5Z2a3uBx3FR:1JBAb5bAvmTF2OHQlxz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06a739ed21032dccdb81b6e4c81d837d

Files

06a739ed21032dccdb81b6e4c81d837d
.exe windows:4 windows x86 arch:x86

90e8c94e74463dc34010b4cf45ee60c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetFileSize
GetCommandLineA
CloseHandle
lstrcpyA
lstrcatA
GetStartupInfoA
GetModuleHandleA
Sleep
GetTickCount

msvcrt

wcschr
memmove
_exit
rand
wcslen

Sections

.text
Size: 1024B - Virtual size: 947B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 692KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ