06a9d0324869e6053311bc5dec40e6c9 | Triage

Sharing

General

Target

06a9d0324869e6053311bc5dec40e6c9
Size

171KB
MD5

06a9d0324869e6053311bc5dec40e6c9
SHA1

7e5f573d4d5b55b2cf43db6a354efa8bd15d73cf
SHA256

ca8b2813678438095a97b6ecee2315615f4134f8809db14e3f385774c1018b72
SHA512

9cffc2fd8d6d631382962ec35edc692534f7fbddb59fe99c28e2a800d2b7fd63e708eac6ed7f4f29a67bbbec03d91b6258b21e7f2f1a4b5807e448f31e06bd22
SSDEEP

3072:xcxlxsguWVh0WDTo80Oa2TmT7rbS7m8aXNplAS8Oi4Xb:xm7sgumh0Krxa2TmTbS7mZmd4Xb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06a9d0324869e6053311bc5dec40e6c9

Files

06a9d0324869e6053311bc5dec40e6c9
.exe windows:4 windows x86 arch:x86

7bcc1ee13c77eec043b1750d69ad1b51

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadLocale
GetVersion
GetProcAddress
GetCurrentThread
VirtualAlloc
LocalFree
CloseHandle
LocalAlloc
GetFileType
GetSystemInfo
GetModuleHandleA
GetVersionExA
LoadLibraryA
GetLastError

user32

CharNextA
GetFocus
GetKeyState
DispatchMessageA
TranslateMessage
BeginPaint
GetMessageA
EndPaint

advapi32

RegOpenKeyW

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ