06ffe6a9cdd4a2e4e2cbb7a32163355a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06ffe6a9cdd4a2e4e2cbb7a32163355a
Size

110KB
MD5

06ffe6a9cdd4a2e4e2cbb7a32163355a
SHA1

3c6f096ab0f564fbfc938988fa782ff8311cde49
SHA256

2cd9ad6690cfdceee25d18de575d26a07927abf27afdfa3dedb61792d9aee23c
SHA512

4a220ffe93316be0401a4cfb074b496fa6453818b9321c0cbabaaf92d9a93d674d708890653dcad8bde40c630c3fb70ef537efced0da77d690bdfb046d635674
SSDEEP

3072:3TWoxYxphvZCZqCO5yCugr5SCsu2oh40kv3VucVEp:36oxYxjREqCOow5Fsu6vFu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06ffe6a9cdd4a2e4e2cbb7a32163355a

Files

06ffe6a9cdd4a2e4e2cbb7a32163355a
.exe windows:4 windows x86 arch:x86

09ac42c46f5973775cca7adc214e02d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitAtomTable
GetStringTypeExA
GetPrivateProfileSectionNamesA
EnumDateFormatsW
EnumResourceNamesW
GetConsoleCommandHistoryLengthW
ExpungeConsoleCommandHistoryW
WriteConsoleInputVDMW
GlobalAlloc
GetSystemPowerStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 41KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE