06c0a1e55577562c8bb2491fa9678e32 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06c0a1e55577562c8bb2491fa9678e32
Size

76KB
MD5

06c0a1e55577562c8bb2491fa9678e32
SHA1

c5e17fa93c0a31597c8f40391d17d06b19fb55b4
SHA256

abab68a45d4fb68237a4bc6fb225a2b7f2b57f508c000e02a91706362a490317
SHA512

3e0f7f46742461553da757cd64e619c4729739ee65fec6455ca2cc2616fdca88e7e913cd2b7e4d309188c39b536cb6688ff6e953645747254e665320ae87d95c
SSDEEP

1536:uel7Ox15J2LaeoPR5jukYnld3IuWqsmv1CUXZjzfpjVrs2ryrd1vUQuq6:uel7OxPoLSJ5elSxmv1JX9LHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06c0a1e55577562c8bb2491fa9678e32

Files

06c0a1e55577562c8bb2491fa9678e32
.exe windows:4 windows x86 arch:x86

cb0b2e68882ec9c0ad3f526aece5cdeb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileInformationByHandle
GetProfileSectionA
CreateMailslotW
DeleteTimerQueueTimer
RegisterConsoleIME
PrivMoveFileIdentityW
CreateTimerQueueTimer
SetStdHandle
CreateFiberEx
OpenFile
TerminateJobObject

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE