36de9df43f6cf4a5dee1d4a869cf976b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36de9df43f6cf4a5dee1d4a869cf976b
Size

28KB
MD5

36de9df43f6cf4a5dee1d4a869cf976b
SHA1

9aaa27ba3a4c8d90a9d1a135e36a1cb0d58566a5
SHA256

dc8429bfbf102882351402b1f7cb75c1ea1933cbb50d247a487c4a7fa17220d7
SHA512

7cb008f9291183799de6245f8ee676fb52286ac40c8b267965a3c53d0b405d9ac4ca3e6815685cee35db03744c41342c8881217e9fa8af164d33d865637dbace
SSDEEP

192:8wj3ABi/o+c2SwfxsNDhrQXi5B1hUmZBdZDrhubcNgoFijGM94a9pOyyOqG7nh6p:ra8oga5JUmlhhBHnyyOTrh6oZgHOF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36de9df43f6cf4a5dee1d4a869cf976b

Files

36de9df43f6cf4a5dee1d4a869cf976b
.exe windows:4 windows x86 arch:x86

dc978b3879d3cece593572b27d5dd524

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

kernel32

HeapCreate
HeapDestroy
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeW
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ