06ab63244f9e79e637ddcccb69c67f4a357b6422480f7e7fcfc1a6b0143e6f34 | Triage

Sharing

General

Target

06ab63244f9e79e637ddcccb69c67f4a357b6422480f7e7fcfc1a6b0143e6f34
Size

83KB
MD5

b911bdbf56b12b9e9e8da3bcae94d58f
SHA1

8d5c6238a04c35c0bd5d8eca64c1e675958e13cf
SHA256

06ab63244f9e79e637ddcccb69c67f4a357b6422480f7e7fcfc1a6b0143e6f34
SHA512

d986a61801e7ea964956811c79a6e04367ccb0e45a14df38ebabf88566ac019602bf2cf44bed479d65a45aaf3e8f338c8f3c1007b07798e6b3c1788f5756b17e
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOYep5qD7:GhfxHNIreQm+Hirep5qD7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
06ab63244f9e79e637ddcccb69c67f4a357b6422480f7e7fcfc1a6b0143e6f34

Files

06ab63244f9e79e637ddcccb69c67f4a357b6422480f7e7fcfc1a6b0143e6f34
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PEC
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE