36974cfc2c39b48d73134d938f9a3ba475693a7ff3a0bab9fc8fa0711527503a | Triage

Sharing

General

Target

36974cfc2c39b48d73134d938f9a3ba475693a7ff3a0bab9fc8fa0711527503a
Size

1.6MB
MD5

99bdb55e60e46fddfc1321d49ba0f91d
SHA1

7fc713daaeb4cfb9dea6665e04683fcf3af3f4b0
SHA256

36974cfc2c39b48d73134d938f9a3ba475693a7ff3a0bab9fc8fa0711527503a
SHA512

33e3b0e2b4212f6b1b2c1633794db3516d8e08caea33ec3bd1ada463dd934322962a647a76f50678b9612c7e5c6784930596272701419360c5d4446a65a21f9f
SSDEEP

24576:cnfJGxxQjSZtQxYH5mcBR4fHoMc0szgn5gosrjc3UfldBnjcetH6yP:ch0lQ45XRKHZc0sy5gDyUfLBnQMH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36974cfc2c39b48d73134d938f9a3ba475693a7ff3a0bab9fc8fa0711527503a

Files

36974cfc2c39b48d73134d938f9a3ba475693a7ff3a0bab9fc8fa0711527503a
.dll windows:5 windows x86 arch:x86

0f996dfe44d672f037617be5838a6d75

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

CryptCreateHash

oleaut32

GetRecordInfoFromGuids

kernel32

OutputDebugStringA
GetModuleHandleA
GetStringTypeA
GetModuleHandleW
SetPriorityClass
AreFileApisANSI

gdi32

SetDCPenColor

user32

SetForegroundWindow
FreeDDElParam

mprapi

MprAdminGetErrorString

Exports

Exports

AwcdthodsHlu

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 4KB - Virtual size: 111B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ