06fa41823df321e80ef4e48c78b64c86 | Triage

Sharing

General

Target

06fa41823df321e80ef4e48c78b64c86
Size

317KB
MD5

06fa41823df321e80ef4e48c78b64c86
SHA1

e1bcc19f85617a547841b97ab2b4b464d622cb35
SHA256

ccf21851d52a7235915f100a52fc00d5ec8513c92531b17ced1947c85ed4cd74
SHA512

f5e8f440bcc28e4f6341d596ac8c1e34c9b4cd15262139ee499bf858cac93d6379f7298a524adb1e073c07636484449bcfd0f21a2d02abbb2e9176bab0b5a57c
SSDEEP

6144:/JvB8U3GLsvCjuVwg6ndXmgjGNUYYAleJGWS4blVJRsjTMEjN2ndh:/HqsUuVYndXm6ntAezS+RsjYv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06fa41823df321e80ef4e48c78b64c86

Files

06fa41823df321e80ef4e48c78b64c86
.exe windows:4 windows x86 arch:x86

d7aa32bf87e7ff608f6007829b59c292

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCommBreak
GetStdHandle
EnterCriticalSection
lstrcat
CloseHandle
RaiseException
GlobalUnlock
GetOEMCP
LoadResource
IsBadCodePtr
WriteProfileStringA
GetLastError
LocalFree
VirtualAlloc
SetConsolePalette
HeapCreate
GlobalAddAtomA
LoadLibraryExA
GlobalFree
DeleteAtom
GlobalAddAtomA

user32

BeginPaint
ValidateRect
GetParent
GetWindow
IsIconic
EndPaint
GetWindowTextA
GetClassInfoExA
CloseWindow
DrawEdge
AlignRects
ShowWindow
GetDC
GetClassNameA
GetWindowTextLengthA
ReleaseDC
GetForegroundWindow
GetFocus
GetActiveWindow

wsock32

WSAStartup
WSASetBlockingHook
WSAGetLastError
WSAAsyncGetServByPort
WSACleanup

linkinfo

CreateLinkInfoA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 700KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ