36e6859a246c6427ad30b2259234db26ce3b8e8ebf8bd5981de23c4d27b7985b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36e6859a246c6427ad30b2259234db26ce3b8e8ebf8bd5981de23c4d27b7985b
Size

51KB
MD5

a4ba1432c5cbce251351d58171672912
SHA1

98f0f390d5dfcab57ee6cf706902c1fad80fc707
SHA256

36e6859a246c6427ad30b2259234db26ce3b8e8ebf8bd5981de23c4d27b7985b
SHA512

6d3e36aaefdbe01545e35b729a65736d895cfd1099735a11e71d88fc8075f70a48e95043d1af909258bf429ff4de105daec6c68092988a828e00cb15e189c945
SSDEEP

768:SWTNyMhhvcgNWQBG1Ee/Mg1mNN8H7jw78qoEA4KL2:SWTXhh0gNfw1Eez1mWjw7BoLV2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36e6859a246c6427ad30b2259234db26ce3b8e8ebf8bd5981de23c4d27b7985b

Files

36e6859a246c6427ad30b2259234db26ce3b8e8ebf8bd5981de23c4d27b7985b
.exe windows:5 windows x86 arch:x86

1767080617bf8443c0422165e2b8ce4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
GetLastActivePopup
PostQuitMessage
BeginPaint
EndPaint
DefWindowProcA
CreateWindowExA
LoadIconA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA

kernel32

GetCommandLineA
GetStartupInfoA
HeapAlloc
WriteFile
ExitProcess
GetFileSize
CloseHandle
GetTickCount
GetEnvironmentStringsA
lstrcatA
lstrcpyA
GetModuleHandleA
LoadLibraryA
GetTempPathW
GetProcessHeap
CreateFileW
GetLocalTime
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection

comctl32

InitCommonControlsEx

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ