36c4464c46248f1911c41d03a233d25a16d28b37bc07d777d6bd81d796567e3d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36c4464c46248f1911c41d03a233d25a16d28b37bc07d777d6bd81d796567e3d
Size

39KB
MD5

9a7828ea88f0cb2f58978d5cf03b2334
SHA1

3239973cf358146b4e73c137085b94e9cdfab316
SHA256

36c4464c46248f1911c41d03a233d25a16d28b37bc07d777d6bd81d796567e3d
SHA512

cb867d918f9b0e645f39d17848525adb0f671df3bdc974e20b3e32b8fe2d4a88105eea47d49c05f5b8cf08ad5d6398e5e3f2ebaf4a21693e6b1001a219ed2a90
SSDEEP

768:Y4VqN6B1syPDb5d3mOWDsKxlpv84t+4pa75udZ/:06oypd3mOWDsKxlN84W75ur/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36c4464c46248f1911c41d03a233d25a16d28b37bc07d777d6bd81d796567e3d

Files

36c4464c46248f1911c41d03a233d25a16d28b37bc07d777d6bd81d796567e3d
.exe windows:4 windows x86 arch:x86

405884de03f1a4d257d3812157bfae8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
ShowWindow
PostQuitMessage
DefWindowProcW
SendMessageW
LoadIconW
LoadCursorW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
PostMessageA

kernel32

GetModuleHandleW
HeapAlloc
GetProcessHeap
FindClose
GetFileSize
FindFirstFileW
DeleteFileW
GetStartupInfoW
CreateFileW
FindNextFileW
SetFilePointer
ReadFile

gdi32

CreatePen

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ