36cdbccd82db4dd6cd711aeb6fa8a9f5

Sharing

Copy URL Twitter E-mail

General

Target

36cdbccd82db4dd6cd711aeb6fa8a9f5
Size

1.6MB
MD5

36cdbccd82db4dd6cd711aeb6fa8a9f5
SHA1

42fdd84c748fc486170327c6a6c5b640b99b0ce8
SHA256

3c63ecda5197b0e363169bf8f8d9482b10b66b67445d5dad07e07d58e858835d
SHA512

ebdbaf1ece453fb87fefa7ac378e4611c63c8d08ed2beaa839a1e3dc08fabc6fdbcdb979d057ae5fe77820fb10948cc60ae63cf5052501e140bd43ec48be1df2
SSDEEP

24576:aWYE649X3E/2psWp4FW+aHYAWgb6FP07wWUblYZtulW9u5YtSuxxWsA6LeW3AtSs:pce4liYKb2P+8mvEYFNAcAtqB3jWx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36cdbccd82db4dd6cd711aeb6fa8a9f5

Files

36cdbccd82db4dd6cd711aeb6fa8a9f5
.exe windows:5 windows x86 arch:x86

63cc030d34ea822207261ca9c2eea4d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
ExitProcess
EnterCriticalSection
InitializeCriticalSection
GetCommandLineW
GetVersion
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
GetCurrentProcessId
SetCurrentDirectoryA
SetCurrentDirectoryW
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetLastError
SetThreadLocale
SetThreadPriority
SizeofResource
Sleep
SuspendThread
SetSystemPowerState
LoadLibraryA
SystemTimeToFileTime
GetLastError
GetModuleHandleA
GetStartupInfoW
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
GetProcAddress
GetTickCount
GetStringTypeW
LCMapStringA
SystemTimeToTzSpecificLocalTime
LCMapStringW
GetStringTypeA
MultiByteToWideChar
RtlUnwind
GetStartupInfoA
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte

user32

SetWindowsHookExW
SetWindowRgn
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetTimer
SetScrollRange
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetForegroundWindow
SetFocus
SetCursorPos
MessageBoxW
SetScrollPos

gdi32

Rectangle

ole32

CoInitialize

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 14.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fixup
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63cc030d34ea822207261ca9c2eea4d3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 11KB - Virtual size: 14.1MB

.tls Size: 512B - Virtual size: 12B

.fixup Size: 3KB - Virtual size: 3KB

.rsrc Size: 20KB - Virtual size: 20KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 11KB - Virtual size: 14.1MB

.tls
Size: 512B - Virtual size: 12B

.fixup
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 20KB - Virtual size: 20KB