4036cc4eb6ec1480d86d6af561c6dbc9 | Triage

Sharing

General

Target

4036cc4eb6ec1480d86d6af561c6dbc9
Size

31KB
MD5

4036cc4eb6ec1480d86d6af561c6dbc9
SHA1

9d8b35bb442b3830a1bf18a647ef7ee4731d268e
SHA256

6584214be8bf801f687fb8904733e4a3f091a8cce5d13e7298ccbf99aa7459ce
SHA512

1391cf38c98b266cbfff5e7f8b70a08e1076e9056ca14c66bf1a96175da2d48dd3dfee153524360c8b26920552a4cd7d2dd7b2aea405f6184d8303bc993f3157
SSDEEP

768:7AeGqcvlp8GMzc3V/rpg7FgFDSBeb6I8ROw6HiFG4ezFD:7A/qcvv8shdg7Hg6I8h6H0EFD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4036cc4eb6ec1480d86d6af561c6dbc9

Files

4036cc4eb6ec1480d86d6af561c6dbc9
.exe windows:4 windows x86 arch:x86

9509c593841effaaf3a4df0df4da5f7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAGetLastError

ntdll

NtCreateKey

kernel32

VirtualAlloc

msvcrt

_except_handler3

dhcpsapi

DhcpDsInit

Sections

.textbss
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE