06b462b37dec4c6a72486733553278418e6bd6efecc221603aa622950f2103b8 | Triage

Sharing

General

Target

06b462b37dec4c6a72486733553278418e6bd6efecc221603aa622950f2103b8
Size

1.7MB
MD5

8712331f19601cc1bd7e1285df6a46a9
SHA1

f9343555346eb6de9167c8ce159cceee2d19893a
SHA256

06b462b37dec4c6a72486733553278418e6bd6efecc221603aa622950f2103b8
SHA512

a5a9c95caa15a9b5a7c8ba424eb456fea965acabf177ab6749a04d64bae08e0c0529af2fc05a641a4208823171850bc6a05e3bfa0a7147278b1034003f1a5dd0
SSDEEP

768:DWpalqjjbZIkLXCcNtKOXzveyp8aEBk3rQ5lVmEBj9s++M7W:+aEj9I4COvNjQpj9snM7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06b462b37dec4c6a72486733553278418e6bd6efecc221603aa622950f2103b8

Files

06b462b37dec4c6a72486733553278418e6bd6efecc221603aa622950f2103b8
.dll windows:6 windows x86 arch:x86

1ad9933c191d9aba5c974ed83db5eaa0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
LeaveCriticalSection
CreateFileA
WideCharToMultiByte
GetCurrentThread
GetLastError
DeleteCriticalSection
EnterCriticalSection
WaitForMultipleObjects
InitializeCriticalSection
LoadLibraryA
GetProcAddress

user32

CreateWindowExW
GetWindowThreadProcessId
PostMessageW
SetTimer
PostThreadMessageW

Exports

Exports

KrasIodW

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ