06f6e0ecb7f6c443178b70e51dc22c2b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06f6e0ecb7f6c443178b70e51dc22c2b
Size

66KB
MD5

06f6e0ecb7f6c443178b70e51dc22c2b
SHA1

696dd39166b4ffeaf5bbb139336657e430034aa6
SHA256

ddadebd77aa38c68bcad79056c45f4ccf0491f83070cc57d58529bcd4aa8aa36
SHA512

e4124d41272065630d5e02cfd04c734ecd1da2bd73bbf69faee3e4e5f20c675fce9ac6b573092da3631e3fd9d92416ee88febb2bb00c7bd8d3e0faf11b55741d
SSDEEP

1536:oBRo8PBtquLkLnhKXTmoi01tiz3hvrFUfC4X+:CRYuoLnctrizdm1O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06f6e0ecb7f6c443178b70e51dc22c2b

Files

06f6e0ecb7f6c443178b70e51dc22c2b
.exe windows:4 windows x86 arch:x86

41cb9a280706442ca2047d088cd630e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
PeekConsoleInputW
GetNamedPipeInfo
GetCPFileNameFromRegistry
GetNumaNodeProcessorMask
TzSpecificLocalTimeToSystemTime
TerminateThread
GetProcessShutdownParameters
BackupSeek
MapUserPhysicalPagesScatter

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE