06a84260d764d715cd75d3a4c79ee687 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06a84260d764d715cd75d3a4c79ee687
Size

83KB
MD5

06a84260d764d715cd75d3a4c79ee687
SHA1

6440ce510897ae19b4454335005d91bee94dbd56
SHA256

40b511c4100371dfb7b8ac72ce50926d77796b329cadc223b78a8f0b17ac618d
SHA512

2f2fd74164af175af58d99384aecdc6392a17d89221226b38baaec7de3d9321cbbc7a41566d6fc9fa6f9d2b2be739b98226ef08f8c8197602494364930b0d658
SSDEEP

1536:x90BQVYoHmUbOBLL9E07dqDiGyjEErxTWDTMqhGKYIZTET8bDQ:+oHNuLh3CyjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06a84260d764d715cd75d3a4c79ee687

Files

06a84260d764d715cd75d3a4c79ee687
.exe windows:4 windows x86 arch:x86

cfadb83c29217ef2ba20a1de1aa360f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreatePipe
SetConsoleHardwareState
BaseDumpAppcompatCache
DuplicateConsoleHandle
SetHandleCount
AddLocalAlternateComputerNameW
GlobalHandle
FillConsoleOutputCharacterW
GetVersion
GetNamedPipeHandleStateW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE