36c100a096553e087a9f4902c5d1b5ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36c100a096553e087a9f4902c5d1b5ba
Size

421KB
MD5

36c100a096553e087a9f4902c5d1b5ba
SHA1

fdb8631d92398a13ab830127c234283adf59be85
SHA256

7df6efbbf6c715f86b426550b6e43e5dcea81db63fef4e46d2bfe69d19dab139
SHA512

9d0edf3fa0254a5ff7c3e0425f1773f4a6c92690cb6e5755f4ae88d23830ebdfd201ed0a5415f4730a24a7f8adc264a6db37e4584ac35e819fae33c600e9bf9c
SSDEEP

12288:yusMLe8VS2zuFZ/BPhQj3uhbjz5IjE4a:yue8NMgMH5In

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36c100a096553e087a9f4902c5d1b5ba

Files

36c100a096553e087a9f4902c5d1b5ba
.exe windows:4 windows x86 arch:x86

41507753530d76bf751bd1509806ec8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

Sections

CODE
Size: 23KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE