06ab68554d5764e725793c9ba6ff5c90 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06ab68554d5764e725793c9ba6ff5c90
Size

119KB
MD5

06ab68554d5764e725793c9ba6ff5c90
SHA1

632b486608191b3c9a6338ea3d15e352f15a9dd1
SHA256

42e4606b8af4dbebef60eaf5c3a7607077bf584492ff09b900df952c113ca90d
SHA512

6825337be1730dd51282748a4c7b72d11b6e6b1aebf557e1a61740930e008d13fdd87127291cebbe4816b79cd0eaaa7731d70c2cecd75855fd1a76236a787690
SSDEEP

3072:lvLO8VSXIf35LRqJ6hn1twzIXaXcXiWs3QOXqX8Z:lvL/VB35LRWIXqW6zZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06ab68554d5764e725793c9ba6ff5c90

Files

06ab68554d5764e725793c9ba6ff5c90
.exe windows:4 windows x86 arch:x86

7efa4cb91c4d4206d9c5b139ef7ee42c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetStartupInfoA

user32

CloseClipboard
GetWindowRect
EnableWindow
DrawTextW
EmptyClipboard

gdi32

CreateRectRgn
GetDeviceCaps
CreateSolidBrush
DeleteObject
DeleteDC

oleaut32

SafeArrayCopy
GetErrorInfo
SafeArrayCreate

msvcrt

__getmainargs
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_exit
_XcptFilter
exit
_acmdln
strcmp
_initterm
__setusermatherr
_adjust_fdiv

Sections

.text
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 240KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ