060330403285d9dda781390e6ee6556d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

060330403285d9dda781390e6ee6556d
Size

253KB
MD5

060330403285d9dda781390e6ee6556d
SHA1

ab6b5e16ac1d1a208c42fb5ed6d106147476f8c6
SHA256

690c619044350f82b8242cd9102d7fa758a07d320f5e1a02466b6a59fb1220a0
SHA512

8e943453bf851c81373c6a1bbd2db26d01cf634129b559c90d5346a195122c5334d793a18ce86e6059ca95184fec01594b4e3298c204549d4183f9d208598386
SSDEEP

6144:6OypABfS8PWfXkbH6BvOgicY0vKfIr4dXZSNfsWyu4a:6JwakOQihG84dYE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
060330403285d9dda781390e6ee6556d

Files

060330403285d9dda781390e6ee6556d
.exe windows:4 windows x86 arch:x86

bf37b27f1e630061a1a370b39ea6c343

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 234KB - Virtual size: 6.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE