36be70ced7e127f1c8dce19be4505b703528e33b198c421387686e2da309c5ed

General

Target

36be70ced7e127f1c8dce19be4505b703528e33b198c421387686e2da309c5ed
Size

39KB
MD5

b83886a81b9cfbc58d11488f911387dc
SHA1

5036f3d614911463ad5c03725478ed54cbc98894
SHA256

36be70ced7e127f1c8dce19be4505b703528e33b198c421387686e2da309c5ed
SHA512

7e068d2c7b10635894cce5008c35b0f1b995ca69ad36ea92f8353584692b0557a52610e5f4aa9ba11257117ae42e2f38a5b496b76d6dc73f839d50ed3a55379d
SSDEEP

384:77vwRGyCMPTBHFOow/nf4SxX2ntA5Z7p1MJXOsqeR6iE+:XwPrBl9snglntu1MJXOsrE+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36be70ced7e127f1c8dce19be4505b703528e33b198c421387686e2da309c5ed

Files

36be70ced7e127f1c8dce19be4505b703528e33b198c421387686e2da309c5ed
.exe windows:5 windows x86 arch:x86

ec37f725b2689e4932373eab7c062bfb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Imports

dbghelp

DbgHelpCreateUserDump

glu32

gluBeginCurve
gluBeginPolygon
gluBeginSurface
gluBeginTrim
gluBuild1DMipmaps
gluBuild2DMipmaps
gluCylinder
gluDeleteNurbsRenderer
gluDeleteQuadric
gluDeleteTess
gluDisk
gluEndCurve
gluEndPolygon
gluEndSurface
gluEndTrim
gluErrorString
gluErrorUnicodeStringEXT
gluGetNurbsProperty
gluGetString
gluGetTessProperty
gluLoadSamplingMatrices
gluLookAt
gluNewNurbsRenderer
gluNewQuadric
gluNewTess
gluNextContour
gluNurbsCallback
gluNurbsCurve
gluNurbsProperty
gluNurbsSurface
gluOrtho2D

kernel32

MapViewOfFileEx
GetACP
GetSystemDirectoryA
LocalFree
SetConsoleTitleW
EnumCalendarInfoW
GetFileSize
ReadFile
CreateFileA

adsldpc

ADSIGetColumn
ADSIFreeColumn
ADSIModifyRdn
ADSIFreeColumn
ADSIGetColumn
ADSIGetFirstRow
ADSIGetNextColumnName
ADSIGetNextRow
ADSIGetObjectAttributes
ADSIGetPreviousRow
ADSIModifyRdn

msrating

RatingCustomInit

mtxclu

MtxCluIsClusterPresent

samlib

SamAddMemberToAlias

Sections

.text
Size: 5KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

uinC
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec37f725b2689e4932373eab7c062bfb

Headers

File Characteristics

Imports

dbghelp

glu32

kernel32

adsldpc

msrating

mtxclu

samlib

Sections

.text Size: 5KB - Virtual size: 28KB

DATA Size: 7KB - Virtual size: 16KB

rsrc Size: 23KB - Virtual size: 24KB

uinC Size: 512B - Virtual size: 496B

.text
Size: 5KB - Virtual size: 28KB

DATA
Size: 7KB - Virtual size: 16KB

rsrc
Size: 23KB - Virtual size: 24KB

uinC
Size: 512B - Virtual size: 496B