b06dbeed57d2a99f03ac4b52db50e63b475f3bb78f4e60d5ecb6782eb24b19d9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b06dbeed57d2a99f03ac4b52db50e63b475f3bb78f4e60d5ecb6782eb24b19d9
Size

68KB
MD5

2352cfbb8fbd7c924e78a34237f1f759
SHA1

7d669811734f292a72e91a9bef738e0df8bd682e
SHA256

b06dbeed57d2a99f03ac4b52db50e63b475f3bb78f4e60d5ecb6782eb24b19d9
SHA512

f835b58a8a8a2f3fe6395d8105e3e65d8e4b9afd3129d9b8006ce21a8794fb7970f877a51bb7a3abb814aa7a69044566cb4e48b2121e63aa1d95b5224bc16724
SSDEEP

1536:P7gnFmSML3BlY+LpI2IIk85Fs+LNRBoxBn:cnFm++FVs+pwX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b06dbeed57d2a99f03ac4b52db50e63b475f3bb78f4e60d5ecb6782eb24b19d9

Files

b06dbeed57d2a99f03ac4b52db50e63b475f3bb78f4e60d5ecb6782eb24b19d9
.dll windows:5 windows x86 arch:x86

039bcbc605477e8e87ec550c2e60e748

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyW
lstrcpynW
GetProcAddress
WideCharToMultiByte
lstrcatW
lstrlenW
lstrcmpiW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
FreeLibrary

user32

wsprintfW

ole32

CLSIDFromString
StringFromGUID2

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ