06111b4b1d675951c637b51e32be2fdb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06111b4b1d675951c637b51e32be2fdb
Size

133KB
MD5

06111b4b1d675951c637b51e32be2fdb
SHA1

239048f08f937c8dd03d5cb0b95b94eb6fac0671
SHA256

a10cc4566b2c02d9d5c027f6585b2214a9d981c5407ab2adc33d5dcc1bbf7308
SHA512

0fbeaec711923d3eebce6cf0b6b32d56f61d06573ce8dce5755c7d8e408fed4eb165798999ea6ad92f0012e2dc9c373af055135673f6ac5b14f3777f07b0a5c2
SSDEEP

3072:slqOBWWjsytA+oo0zXkd2Lud+TvCU0Cw3nuDtKkssuVN:Br7zXkgid+TvCUJDtKksNV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06111b4b1d675951c637b51e32be2fdb

Files

06111b4b1d675951c637b51e32be2fdb
.exe windows:4 windows x86 arch:x86

7b98131fc07c9f29c8df1d8c89021820

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OutputDebugStringA
ExitProcess
LoadLibraryA
VirtualAlloc
lstrlenA
RtlUnwind

oleaut32

SysFreeString
SysAllocString
VariantClear
SafeArrayAccessData
SafeArrayCreateVector
VariantInit
SafeArrayUnaccessData

ole32

CoInitialize
CoCreateInstance
CoUninitialize

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.plugins
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE