06d2ee985ae4aa6d849e8c113d2b591b | Triage

Sharing

General

Target

06d2ee985ae4aa6d849e8c113d2b591b
Size

68KB
MD5

06d2ee985ae4aa6d849e8c113d2b591b
SHA1

31401e9a43626529b2fbff1ebb6f200ebd8822e2
SHA256

79fc11d9903d2df177b831259ec34adedf2c8ce6cb09ae36eebbf5554d84ceb5
SHA512

f8ab1e6ad75ed5b2a64a67025dc62b1a1d166b06318f005e5606cc254d2ed2f065b852d1e4f53c4e2e3e57350143533279e3ebe8be5df1398a9f536735c0f39f
SSDEEP

768:uTDlAJ3KkHzfUZFjsS2GMYNykKF2qGrMQbl5O3eNWx/c3iFIqNo3rta78UdJail2:ElwzfUZpPtxiR04eNWB+wNJDj1s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06d2ee985ae4aa6d849e8c113d2b591b

Files

06d2ee985ae4aa6d849e8c113d2b591b
.exe windows:4 windows x86 arch:x86

bb5539853902e549d70ec88ea2fa0c6d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
FindResourceA
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
GetWindowsDirectoryA
LoadResource
LockResource
SizeofResource
WriteFile
lstrcatA
lstrcpyA
lstrlenA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE