06e84d4ca066dbe20b4d37686b65493fcef7f085e377af0afe9ec2b4ee57d7e7 | Triage

Sharing

General

Target

06e84d4ca066dbe20b4d37686b65493fcef7f085e377af0afe9ec2b4ee57d7e7
Size

1.3MB
MD5

223aee3f86a178df73c9dda86284ae64
SHA1

f7b2abf596768dacce222927c87312682461458f
SHA256

06e84d4ca066dbe20b4d37686b65493fcef7f085e377af0afe9ec2b4ee57d7e7
SHA512

00915ce54803e540f84265964870203c925f31443eb06f125646edcdd7b0766c30dcaafd7cc0d851776169e8533ef5bbebaf978f29a903a38de25a2683530c24
SSDEEP

24576:hc3K7UhKn4ZzOE3oSNdUXIy6pybLwnYGdqiUqm9W6cZYY1C68xW9idIfH47znynh:1UhhzP3VdUFbGUiUN9W6cZYYL1c+fH4q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06e84d4ca066dbe20b4d37686b65493fcef7f085e377af0afe9ec2b4ee57d7e7

Files

06e84d4ca066dbe20b4d37686b65493fcef7f085e377af0afe9ec2b4ee57d7e7
.exe windows:4 windows x64 arch:x64

e011cf8334eac9f5babb1d0590d063f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle

msvcrt

__C_specific_handler

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

user32

GetWindow

advapi32

RegSetValueExA

shell32

SHGetFolderPathW

Sections

.text
Size: 9KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ