94f36b3056fa6fe33812bbc3c6f42f90_exe32[.]exe | Triage

Sharing

General

Target

94f36b3056fa6fe33812bbc3c6f42f90_exe32.exe
Size

165KB
MD5

94f36b3056fa6fe33812bbc3c6f42f90
SHA1

7184dfb4d6572eac91951c8d3f3d58e3a7a9fe0e
SHA256

5a73148d86495be6dfddb1e3fb69549429a76f27a55325297c05c4b3c269f588
SHA512

36995e88555a51aa3a7c6f324ead22ac671715389d0c53dcb1924784744efead0a9ce7fc34bb3e6209db376e287550f82bacb710a0f37f6f9c3f87718a12a046
SSDEEP

3072:lf1AH52h0MAu13T8MXR7CwwjuUkpBmz/BHR9iT+8h2Z1Gp:lfghMAGBmdGOx9iT+Ii1U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94f36b3056fa6fe33812bbc3c6f42f90_exe32.exe

Files

94f36b3056fa6fe33812bbc3c6f42f90_exe32.exe
.exe windows:1 windows x86

ce02fc97755de604b744f484091225bc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
RtlUnwind
LeaveCriticalSection
SetLastError
GetModuleHandleA
CloseHandle
GetCurrentThreadId
GetCurrentProcess
UnhandledExceptionFilter
GetStartupInfoA
GetLastError
GetCommandLineA
lstrlenA
GetVersionExA
GetModuleFileNameA
LCMapStringA
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection

crtdll

__GetMainArgs
exit
raise
signal

advapi32

RegOpenKeyExA
RegQueryValueExA

ulib

?Initialize@LONG_ARGUMENT@@QAEEPAD@Z
??0DSTRING@@QAE@XZ

ntdll

RtlFreeHeap
RtlAllocateHeap

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ