36ddbd2de5101296f4ae5d74c51b3f30N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36ddbd2de5101296f4ae5d74c51b3f30N.exe
Size

9KB
MD5

36ddbd2de5101296f4ae5d74c51b3f30
SHA1

b8727ab82c741f486488507001cdcc76b2c5be95
SHA256

1cdb4520706bfcdd6159de2b28cec3cee7df0c674ec9bfd043271fc387eef16c
SHA512

483794f46ac618b9d97abd6735d2f421bf8f3c9001ed055e842c02da00fab040f9275f41697f72ace89b33d60289ae015bcbddc5fd93dfcf862da6b6c4d919a9
SSDEEP

96:66c0wV01XfVrP4HKOFXD9NeCWwcjYnuRVwB+PUjssuzQ4T6TwbkCbo0UWPR:AqhlP4HKOhZAWWY+GCzQ4mynUk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36ddbd2de5101296f4ae5d74c51b3f30N.exe

Files

36ddbd2de5101296f4ae5d74c51b3f30N.exe
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ