36a6beec9ea930a034471ea7f2de27ce

General

Target

36a6beec9ea930a034471ea7f2de27ce
Size

36KB
MD5

36a6beec9ea930a034471ea7f2de27ce
SHA1

f2a494f574d8c9a316d7852f9c875a94a3514413
SHA256

1214dc72081afb95cd110144a36e718ac1c8f90e02b0437a3ac09aaf05a41a0b
SHA512

ff7666dd5428bc1a8f15fac67aa8eba893d8ade901ffe032cab68d8aa045a63b5d5d79340d1f1aacff16f68523841e559345f18b7c7703aad66e9cd7c36c0d45
SSDEEP

384:3AEWCAqfgT6ESoC0OPo34Ih0mqml/RcNyA1krhaholFH:ZdAV6EQDgLf6zKhgof

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36a6beec9ea930a034471ea7f2de27ce

Files

36a6beec9ea930a034471ea7f2de27ce
.exe windows:4 windows x86 arch:x86

81317051cc37a0cda678a5f21a3c3dbb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
CreateFileA
LockResource
LoadResource
FindResourceA
WriteFile
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
UnmapViewOfFile
CloseHandle
MapViewOfFile
LocalFree
FreeLibrary
LoadLibraryA
CopyFileA
GetProcAddress
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GetLastError
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
MultiByteToWideChar
FlushFileBuffers

user32

DialogBoxParamA
ShowWindow
RegisterDeviceNotificationA

advapi32

CreateServiceA
OpenServiceA
StartServiceA
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
OpenSCManagerA

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

81317051cc37a0cda678a5f21a3c3dbb

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 4KB - Virtual size: 320B

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 4KB - Virtual size: 320B