36bdaac47cb168afade9a9a4f12172bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36bdaac47cb168afade9a9a4f12172bf
Size

837KB
MD5

36bdaac47cb168afade9a9a4f12172bf
SHA1

a6ed6061ea9ab8368d20c00f67f687c96c4d9cb5
SHA256

226406a8a295aa39e32bce3d8902947ebcd786a5a2277cfe9383d753b37fc4b4
SHA512

feb8a96e5e3663fa3b990c494a585d8d6413a9d29f7ec8c3baeefdb4adf91cb98e361f667702ae3def4fe06927f6b41da6e7488afdaa9f2113fc9de32b211d6f
SSDEEP

12288:vAEHMqV/UeB8qV/UeB8qV/UeB8qV/UeB8qV/UeB8qV/UeBNVlxavJm4I6VCxH2bG:vldUYUYUYUYUYUkQvJjdi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36bdaac47cb168afade9a9a4f12172bf

Files

36bdaac47cb168afade9a9a4f12172bf
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

??4COWSAllocator@@QAEAAV0@ABV0@@Z
___mb_cur_max_func

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 587KB - Virtual size: 586KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uro
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE