9036c69b3ed3ed326299b504e619f9444e58069a3bb551d955119aa3e343adc3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9036c69b3ed3ed326299b504e619f9444e58069a3bb551d955119aa3e343adc3
Size

27KB
MD5

72828586594333b55ccde3badf91c51a
SHA1

373d9283c31d920196d7eb9fce31081d7e909270
SHA256

9036c69b3ed3ed326299b504e619f9444e58069a3bb551d955119aa3e343adc3
SHA512

efc99897a714b710171f19ddc4e7f007389eedda8e91dc451aebbaf08ee5e2e33ab32a1e2f5a9836d8a9aeda802897f2df541e5f15482fad64b58cb66f295a4a
SSDEEP

384:Q8hlBtIEFbpRPRUCeD8qXv3izeZR/ES5rBErZWfzBGi:Q8TBtIEBpg3iqZZEAruofzBL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9036c69b3ed3ed326299b504e619f9444e58069a3bb551d955119aa3e343adc3

Files

9036c69b3ed3ed326299b504e619f9444e58069a3bb551d955119aa3e343adc3
.exe windows:5 windows x86 arch:x86

29b31b8fd204e9d1ad4ef065c4aae843

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
DefWindowProcA
PostQuitMessage
LoadIconA
RegisterClassA

msacm32

acmStreamOpen
acmFilterChooseA

kernel32

GetModuleHandleA
GetProcAddress
HeapCreate
HeapAlloc
GetACP
ExitProcess
FreeLibrary
GetTickCount
GetCPInfo
InterlockedDecrement
InterlockedIncrement
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
RaiseException
GetOEMCP
IsValidCodePage
Sleep
HeapSize
SetHandleCount
GetStdHandle
GetStartupInfoW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
InitializeCriticalSection

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ