36d8fee0743193a4273179633fa07d9d[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36d8fee0743193a4273179633fa07d9d.exe
Size

1.1MB
MD5

36d8fee0743193a4273179633fa07d9d
SHA1

eaecfd3a871b691062a25834742e76c43d8e198e
SHA256

18cd3063dcc655b5b9bffc3692d2e2fbc7199ee08e9c6ab01a1d7a6d6b9cc10e
SHA512

1691ffc3f6943bd97351890b7fd0c3e5d27d2e25d808fda55547fbaf3f19b24a11a454204dff2c3eaa6e1e4eb1d0b53a85d918834c1b316db1a5a8914890df98
SSDEEP

24576:/0biRoSErVxIE5fc6eCMl9r/aafhgEI/1526egtzaCcdgf:/y4oRrjIwXeCMlV/jO/Ggrc+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36d8fee0743193a4273179633fa07d9d.exe

Files

36d8fee0743193a4273179633fa07d9d.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ