36b9c52392bd059e65fed6fa68c20e43 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36b9c52392bd059e65fed6fa68c20e43
Size

66KB
MD5

36b9c52392bd059e65fed6fa68c20e43
SHA1

a1504ca8cf631515397ffadc8417fe61ae033915
SHA256

13f40041d6acd00feefab181c944e4265944973a02d614fb63dfde85c6ce81a7
SHA512

d43d2e340fd469720765d524a277f3174aff13b3688832e930cb68cf9cc139805faa0c2be43e5be6934dc5db36a47e668c4278b2011e86ff0e2ee9b66051c966
SSDEEP

384:qxx5MZBcJ4llQvfOh+6z2pFwpkf1Dh1Y8+:qnqZBcJMFH2wC9u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36b9c52392bd059e65fed6fa68c20e43

Files

36b9c52392bd059e65fed6fa68c20e43
.exe windows:4 windows x86 arch:x86

3cd3aba06a71a3fd4726d5e3e8f25b85

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetErrorMode
ExitProcess

Sections

.text
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE