36c055a1718897e0c97699adcc31f0bf | Triage

Sharing

General

Target

36c055a1718897e0c97699adcc31f0bf
Size

162KB
MD5

36c055a1718897e0c97699adcc31f0bf
SHA1

a8026ad291803ff30e5cbfc246c0d1120af56856
SHA256

7621d066b672b9f6ef5563386606cfcf2a650c88096986bcb67c6bcaf7be173d
SHA512

bc8b7e93b44b3c1f7d022019b8479794ee0d866edec6d2005fd1755fe5a9c7b1b4591d4f4117ae84fbf12876e5a4bafcf7027fd8fb8cb5ec6a44077dddd894a9
SSDEEP

1536:0vn9DmOPj3/EyIR1Y+IjIVZgFNyifN/E3+gHurSwzMpE1gNYlVLNl:0l3TIR1YzNy8E3+dGna1rLNl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36c055a1718897e0c97699adcc31f0bf

Files

36c055a1718897e0c97699adcc31f0bf
.exe windows:4 windows x86 arch:x86

08bbff5b021726a49f9a3223ac14a478

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

OleLoadPicture
SafeArrayGetElement
SafeArrayUnaccessData
SysStringLen
SysReAllocStringLen
SysFreeString
RegisterTypeLib

comctl32

ImageList_Remove
ImageList_Add
ImageList_Create
ImageList_GetBkColor
ImageList_Destroy
ImageList_DrawEx

user32

GetForegroundWindow
CharUpperA
GetActiveWindow
GetDesktopWindow
GetMenu
KillTimer
GetWindow
GetFocus
GetDlgItem

kernel32

LocalAlloc
VirtualAllocEx
SetLastError
ExitProcess
SizeofResource
GetOEMCP
LoadLibraryA
SetThreadLocale
VirtualAlloc

Exports

Exports

ph4mSX@4

Sections

CODE
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tpdata
Size: 512B - Virtual size: 394B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eedata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ