236b9c01e6c48b2313ed57ae9340e9d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

236b9c01e6c48b2313ed57ae9340e9d6
Size

1.7MB
MD5

236b9c01e6c48b2313ed57ae9340e9d6
SHA1

563e9179be612ca7c06d9c747a4c2098087c2bc3
SHA256

d480825deb0dd74ca95c21f63d8f3471378fc9bbbf5bffdca3737ab777212394
SHA512

d7fe832b5f53a4bf8e6fa589088394266349e3a0a255c1e67a448c036fde3d4805ca6ba1fed06d40774920b419f543b71a42c0c59637538b6ace99ba22f87dbf
SSDEEP

24576:oI/zVhF1NNMzeg9Ikr1o9HnFiNfpat+dMRyLmgYL4/zxAnNxm01o1AI98:nhF1MN9ISqnScIduyYLezxQNxm3pu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
236b9c01e6c48b2313ed57ae9340e9d6

Files

236b9c01e6c48b2313ed57ae9340e9d6
.exe windows:4 windows x86 arch:x86

c55d58516ab8b94df1945dd02ca3b318

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 1.7MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE