36b8233b74b14777674ca090651518df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36b8233b74b14777674ca090651518df
Size

184KB
MD5

36b8233b74b14777674ca090651518df
SHA1

e5412b6b132dacdedfc17d0a54d8b422bb92e938
SHA256

791b53d5d2680b92d485480763aea69ef8d30c71716e68ca6d504b680d27f75d
SHA512

11dc2cd8496bc5a227032631d57a78d63148034e1d05990ba73457a13758e03a0d7aeb8fcb589823df534070babfbe0ace8e2f243be4fc8b10880ad2175eba17
SSDEEP

3072:xC/bIxzoRAx1CZkzGwG+QnX0W5FuG0VkzsuXK1L07F/G2qI/QBAsJ7IG963Kydyd:OIxzoRAxwxZnX0uukBXK1LmFh/u7lx9Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36b8233b74b14777674ca090651518df

Files

36b8233b74b14777674ca090651518df
.exe windows:4 windows x86 arch:x86

f2323b5d92a70f232d930dba619ddb5d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
WideCharToMultiByte
UnhandledExceptionFilter
FlushFileBuffers
AddAtomW
GetStringTypeA
GetDiskFreeSpaceA
SetUnhandledExceptionFilter
WriteFile
LCMapStringA
FreeEnvironmentStringsW
SetStdHandle
GetOEMCP
ReadFile
GetCPInfo
EnumResourceNamesA
GetEnvironmentStrings
LCMapStringW
CreateFileA
SetFilePointer
IsBadCodePtr
GetStringTypeExA
FindFirstFileA
GetEnvironmentStringsW
GetStringTypeW
GetThreadLocale
VirtualProtect
FreeEnvironmentStringsA
GetFullPathNameA
GetFileAttributesA
MulDiv

rpcrt4

RpcStringFreeA

shlwapi

SHGetInverseCMAP
PathAppendA
SHCreateStreamOnFileEx
PathIsContentTypeA
PathIsFileSpecA
PathCreateFromUrlW

Sections

.text
Size: 90KB - Virtual size: 234KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ