36a54d8d02a2a537444f101d8e7e8152 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36a54d8d02a2a537444f101d8e7e8152
Size

53KB
MD5

36a54d8d02a2a537444f101d8e7e8152
SHA1

75832cc6a00024d814b6fd513f08dcc6e6878736
SHA256

cfea1b5905cba4c59d80a38799ce56e64cf6b3bd96d9ca6a881ae321c5bd77e9
SHA512

3b56d586335396d7856a7c4c6fc0cb822dc3c77ffd0a3e2b074c2a2814afa332c5611c2c2f4bed0d397714a0c5e5f6a9cdf9b57309f54ceadbee58d9c50d1052
SSDEEP

768:9iX6lXszVvd+byskwhhCwnwcKMDILIEN1oRb3dhuRtDcYEns1WTtsExw7L:9iX+X0abyr7w7KqILI5DWtMnYWdOL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36a54d8d02a2a537444f101d8e7e8152

Files

36a54d8d02a2a537444f101d8e7e8152
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 439KB - Virtual size: 438KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zagoy
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.yel
Size: 512B - Virtual size: 23B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ