4c36b02d2201d886c4efc9dd3c1d7900 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c36b02d2201d886c4efc9dd3c1d7900
Size

203KB
MD5

4c36b02d2201d886c4efc9dd3c1d7900
SHA1

3550e0ddac79aeba064a553f9fc676f6736bb864
SHA256

6ce9c6059ecfb6dbc432dafa9660351955fdf9d9161ee9eaef9befc0dc09e0d4
SHA512

7daf9dd129cd6eaaddde96559dcb8f81831c4783c5797ed27505916d7c8a4a68da88385f318a5ca4f5966580fd8fdb5eb3da4b8372be6d66fc71338b6517f288
SSDEEP

3072:hXZhjXKappnWS6RRu8Q7Dxk1mP3f5OVg2d6Bn8eE+:hJh2afnFp847P3t2d6Bn8eE+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c36b02d2201d886c4efc9dd3c1d7900

Files

4c36b02d2201d886c4efc9dd3c1d7900
.exe windows:5 windows x86 arch:x86

1f203e4dd7afaa9f052b96a5906b3d0b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

EndPaint

gdi32

BitBlt

advapi32

OpenProcessToken

shell32

ShellExecuteW

ws2_32

WSAStartup

Sections

.MPRESS1
Size: 151KB - Virtual size: 580KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE