06d9d980dff146beef0a8834ee085d51 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06d9d980dff146beef0a8834ee085d51
Size

33KB
MD5

06d9d980dff146beef0a8834ee085d51
SHA1

e99553bd0ce65e004f513777936c48eea2e2f9e6
SHA256

f52a790c7b875874fa8dd9c64c0d5b2ae42db83c71a56a46b1cf50f8982c3544
SHA512

d8744b04486067d9c2178273aa500690b64f483ba389d392c35acbaeefc200f16ccbb2b20efc473d446ce0400d83ee29aae6b38eb7e49f6717548c2a9b034889
SSDEEP

768:DTE+1wQreXJeiJgxgLus3mean/4lBDKUTL:DI+1Fwexzfef9rv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06d9d980dff146beef0a8834ee085d51

Files

06d9d980dff146beef0a8834ee085d51
.exe windows:1 windows x86 arch:x86

231ead5bdca92845099e540c0459c7a5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetFileSize
GetFileTime
GetModuleHandleA
CloseHandle
RtlUnwind
CreateFileA
SetFileTime

user32

SetDlgItemTextA
LoadCursorA
LoadIconA
GetMessageA
TranslateMessage
DispatchMessageA
SendMessageA
RegisterClassExA
PostQuitMessage
ShowWindow
CreateWindowExA
DefWindowProcA

gdi32

GetStockObject

crtdll

_iob
_itoa
__GetMainArgs
_strnicmp
exit
fclose
feof
fgetc
fopen
fputc
fsetpos
localeconv
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strncmp
strtol
wcslen
wctomb

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 620B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE