36f2c8818bc4bc1233c9d8850982c84b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36f2c8818bc4bc1233c9d8850982c84b
Size

14KB
MD5

36f2c8818bc4bc1233c9d8850982c84b
SHA1

f3a4310b378652ae1d8054f661b43ad9d65b67c7
SHA256

3e2eebe256f002ccf736ff2dbb4f3c65c920489ef6e6b682d4dc4fa6c1f5081e
SHA512

c51339c44626666b63bd783f6acaf81934e19eeb021f4ad9110adc55b43e7c771d4024216efb83f0f59e1e53e9bcdf6349ae217b1e2c94c15a3947e49f507157
SSDEEP

384:eYLFLqGrUAvTNmxOCS3Ijf/3Mj06MYzYF:ZCxOC9r3Mj0ts2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36f2c8818bc4bc1233c9d8850982c84b

Files

36f2c8818bc4bc1233c9d8850982c84b
.dll windows:4 windows x86 arch:x86

ccf11a2b17ba3e581b3f39cbfb15b05c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
VirtualProtect
CreateJobSet

Sections

.text
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ