36b5c81c974391dd173ce850e2a2dbece179f73e6dc329b721fada42536eb7ee

Sharing

Copy URL Twitter E-mail

General

Target

36b5c81c974391dd173ce850e2a2dbece179f73e6dc329b721fada42536eb7ee
Size

2.3MB
MD5

42710b8ff67e0375eb91356ab40fb2a7
SHA1

6d27bf8a5181922ea4f548b4b62798cf3ccedb57
SHA256

36b5c81c974391dd173ce850e2a2dbece179f73e6dc329b721fada42536eb7ee
SHA512

fe2c53058b22ed17e6ea72b8a37e2e5f7c13db9e60fffd51bb57c48fdda24a492860a6e04a6862a333ce00b5e44deb79372ebd3ada181ed3a77edc3c875451a3
SSDEEP

49152:xjb98nENB0zaGr+EG+e84z65wdmrW+V4t8JLIcNX9E:XAE70mGrbG+UCWzs7NX9E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36b5c81c974391dd173ce850e2a2dbece179f73e6dc329b721fada42536eb7ee

Files

36b5c81c974391dd173ce850e2a2dbece179f73e6dc329b721fada42536eb7ee
.exe windows:4 windows x86

5664033e6c8d1bdc383853b487e16f88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
GetErrorInfo
SafeArrayPtrOfIndex

advapi32

RegQueryValueExA
RegSetValueExA

user32

GetKeyboardType
CreateWindowExA

kernel32

GetACP
TlsSetValue
lstrlenW
Sleep

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

CreateStreamOnHGlobal
IsEqualGUID

comctl32

_TrackMouseEvent

urlmon

CoInternetCreateZoneManager

wininet

InternetSetOptionA

shell32

Shell_NotifyIconA
SHGetSpecialFolderLocation

winspool.drv

OpenPrinterA

comdlg32

GetSaveFileNameA

wsock32

WSACleanup

msvcrt

_gcvt

winmm

timeGetTime

iphlpapi

GetAdaptersInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 1.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5664033e6c8d1bdc383853b487e16f88

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

gdi32

version

ole32

comctl32

urlmon

wininet

shell32

winspool.drv

comdlg32

wsock32

msvcrt

winmm

iphlpapi

psapi

Sections

.text Size: 1.2MB - Virtual size: 4.2MB

.sedata Size: 1.0MB - Virtual size: 1.0MB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 11KB - Virtual size: 12KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 1.2MB - Virtual size: 4.2MB

.sedata
Size: 1.0MB - Virtual size: 1.0MB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 11KB - Virtual size: 12KB

.sedata
Size: 4KB - Virtual size: 4KB