36ed1e6cf0e94ff49c5dc8fcffedc7ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36ed1e6cf0e94ff49c5dc8fcffedc7ea
Size

25KB
MD5

36ed1e6cf0e94ff49c5dc8fcffedc7ea
SHA1

1eec6ed7292db8c8c9e1cf766b8f87c2fbfdab4b
SHA256

e84f8c7be8db133ebb7b063b14d6d7278daa5af4f6962e35806f5f7820e3b8ba
SHA512

9de70180195eb4a9667b08cd289c383498f9b6c74dc5de5f874ca486b59e2f5e11266e54c69abca795be7bc73b69f37c2d935b26d52b1c6133a5fe49e88f97cb
SSDEEP

384:8Zoc4n9T+TJKoDlU36dobGsudZ7R+4HvTZe3mgMz:8Zoc8+hKd7QPHvA3mg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36ed1e6cf0e94ff49c5dc8fcffedc7ea

Files

36ed1e6cf0e94ff49c5dc8fcffedc7ea
.exe windows:4 windows x86 arch:x86

118089d1b63b0f880e42e2ad61f640c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
DeleteFileA
CopyFileA
GetTempFileNameA
GetTempPathA
FreeLibrary
SetErrorMode
GetProcAddress
LoadLibraryA
MultiByteToWideChar
FreeEnvironmentStringsA
VirtualAlloc
HeapAlloc
GetLastError
GetFileAttributesA
ExitProcess
TerminateProcess
GetCurrentProcess
SetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetCPInfo
GetPrivateProfileStringA
GetOEMCP
UnhandledExceptionFilter
GetModuleFileNameA
GetStringTypeW
HeapFree
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
LCMapStringA
LCMapStringW
GetStringTypeA

user32

GetTopWindow
MessageBoxA
wsprintfA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE