736d401579ae1f79b3939af0dac6296a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

736d401579ae1f79b3939af0dac6296a
Size

42KB
MD5

736d401579ae1f79b3939af0dac6296a
SHA1

d42de91bb350751689599a0d0021c320dd92447c
SHA256

c2612ff90e10504dcb1569ea40a7b9d8cea64bd143ca0746b003f10d66605547
SHA512

08b41169ac989ba273781d95b01db5ac494104461f056bc196f1449e9c54da58e01a5dc586ff3d317c3648f1c926da8262c110d3ee59854d653b594640dc632d
SSDEEP

768:ZVxiL+qVBfCpUreAw4F3thVZuTElZUPzlaifHRu1XVm:PA+YYuLvFzVZuNPBtRuzm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
736d401579ae1f79b3939af0dac6296a

Files

736d401579ae1f79b3939af0dac6296a
.exe windows:4 windows x86 arch:x86

e16424ca66e9175d392c0423232ac5dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadIOPendingFlag
HeapSummary
IsDBCSLeadByte
GetProcAddress
LoadLibraryA

user32

DrawTextA
CalcMenuBar
GetClipboardSequenceNumber
WinHelpW
BeginDeferWindowPos

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 333B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 501B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ