36f7b8390ad5fa81944c04ee7e8a8dcf | Triage

Sharing

General

Target

36f7b8390ad5fa81944c04ee7e8a8dcf
Size

55KB
MD5

36f7b8390ad5fa81944c04ee7e8a8dcf
SHA1

65a8528373134ce61ec15b134859bf6da8c4eb15
SHA256

a9b1866f3fda9ca1a7e4f6eb0ce152660baec4df78a0dac8dc8d544c4c5a4d6b
SHA512

7bceadfff4baa1daedff5bb13f2900f11818e1f51716a5902fa33e80af2aeedcd8eb255cab519cb10812b3fb1e61fa4e310f4a3b67f9752206c532015dc822de
SSDEEP

768:+jVY+VIxJqJbiCFuPI4EjhsJ5qUHM6Sa2CGnQtLpw67LG542WX9ooz1tOIt7iYXu:+BdVTiC8CGFMVp1Q75KmWozOWBXu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36f7b8390ad5fa81944c04ee7e8a8dcf

Files

36f7b8390ad5fa81944c04ee7e8a8dcf
.exe windows:1 windows x86 arch:x86

ed957d1b6c1df2c4097c62d6cf7f4bdd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW

user32

TranslateMessage

Sections

.text
Size: 50KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ