36823768d14bd6ce16b4d2e8adf03548 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36823768d14bd6ce16b4d2e8adf03548
Size

632KB
MD5

36823768d14bd6ce16b4d2e8adf03548
SHA1

5cb3f6ea5ebbd4178707f24518d0e111b383271a
SHA256

39c513f2721f82f91faee07ea80644b337536f6f1af9f9a8db2b0383596d31ed
SHA512

32606ed2c933b9b107bfe769e412f814e00efebf02db9a05e4d4a540363f200360d1c676f10d3574797b4164e950e9520819a15433bff22d6b93e496a9cdd11c
SSDEEP

6144:KrKN8N6wt3n8zpZ53itzyiQfKEP4rrIZ0Sw6AkXGcLA:uKN8kw+AtzpQLgE2SJA6G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36823768d14bd6ce16b4d2e8adf03548

Files

36823768d14bd6ce16b4d2e8adf03548
.dll windows:4 windows x86 arch:x86

ee9dc027952371747659949e2e0cacc7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GlobalFree
GetCommandLineA

Sections

.itext
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 560KB - Virtual size: 4.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 621B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ