36fd372d229b27617570472bcec54b9b401d5db154370d4fd1643786b18c9b73[.]exe | Triage

Sharing

General

Target

36fd372d229b27617570472bcec54b9b401d5db154370d4fd1643786b18c9b73.exe
Size

257KB
MD5

7d182b70df902cd3e6c37007cf5737ce
SHA1

32603f9b910029a64f0b48da8efa6f828e533e09
SHA256

36fd372d229b27617570472bcec54b9b401d5db154370d4fd1643786b18c9b73
SHA512

4db672c60337fa62f4f5a780c573d2bdcad424f0fa31189d6a8874549c73aefcb280217351d9333d68a243c49c90ffc2178d22057da9459a66db6617ab661376
SSDEEP

6144:jYS+Kp81eoK+afzzrSZn+EP4bvD6NjdF5KMRoWjmF:jYSO8oAfjSebvD6Njblq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36fd372d229b27617570472bcec54b9b401d5db154370d4fd1643786b18c9b73.exe

Files

36fd372d229b27617570472bcec54b9b401d5db154370d4fd1643786b18c9b73.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Administrator\Documents\CryptoObfuscator_Output\WWASZXCW443.pdb

Sections

.text
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ