06f4bdf35a5c6acddce984154ec6ab83 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06f4bdf35a5c6acddce984154ec6ab83
Size

313KB
MD5

06f4bdf35a5c6acddce984154ec6ab83
SHA1

32237248cf2290f4f2c78c1b272575d97a0dad8c
SHA256

9ea16ce6c88a1040e7f5912e276bef480174e9809a6fa667f343b4a39a23a262
SHA512

83c4d2d0aa15cab69b504bbe375a3742a4fc937399b8173430929c8524ca9f20a0ad857e58793caee109db549962ef215e5e120555fac5f1b2c157074c7dfb9f
SSDEEP

6144:jLz1GyIvIER0Y0PFA+KYnXvslQz+StTqLM8yK6EamRzF8/:jLz1avvR0HK+KCDz+PLUKHN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06f4bdf35a5c6acddce984154ec6ab83

Files

06f4bdf35a5c6acddce984154ec6ab83
.exe windows:4 windows x86 arch:x86

03a8717af4afb0642e4b515f6381de77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
LocalSize
GetLastError
Sleep
VirtualAlloc
GetProcAddress
SetEvent
GetModuleHandleA
GetCurrentThreadId

user32

IsZoomed
IsWindowVisible
EnumThreadWindows
GetClientRect

gdi32

PatBlt

ole32

CoInitialize

netapi32

NetDfsManagerInitialize

avifil32

AVISaveOptions
AVISaveOptionsFree

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 702B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 209KB - Virtual size: 561KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ