06d0958ab314b56cb94eb217d24b476d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06d0958ab314b56cb94eb217d24b476d
Size

48KB
MD5

06d0958ab314b56cb94eb217d24b476d
SHA1

a33abd449ddd7056ba88922b973112e20f8e33b1
SHA256

5d033646d9209d7ca95cf0a1693e38c877791e8e8f96f19483b59af7eda9d818
SHA512

24f3ba2fd5df4287e78e19459dee2bd2bfa5584ebd32559031991bf3a8113ee6980893cd907327e7c1a8ca5874c8db6ab0b96ffc089a2f26efd1d066b40786db
SSDEEP

768:d71FFoJ8E/wG6B0oPyx9B8WtYlb0LaZ4WYwM8yT2Tjt:d71FFoJLfa61tAb0OinK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06d0958ab314b56cb94eb217d24b476d

Files

06d0958ab314b56cb94eb217d24b476d
.exe windows:4 windows x86 arch:x86

5e86ce7d57e5a4b4ac2e74194d9a9d53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect
LockResource
LoadResource
SizeofResource
FindResourceA
GetStringTypeA
LCMapStringW
LCMapStringA
HeapFree
HeapReAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeW

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ