36ddac4e66b39797868502c7602095b0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36ddac4e66b39797868502c7602095b0N.exe
Size

58KB
MD5

36ddac4e66b39797868502c7602095b0
SHA1

bb082e5caa64d243e44d23bc36d7120c0b2b6205
SHA256

6c336715831a5c17d9eb06112962fe310c2db0305278e1a8b247c6ff8ae97125
SHA512

de70fcad3c6b300fefc42fba740fb9c7dfc9e9c93ac01498d9ccd28e485338929d7049e744acffeaf3ab1b1afb048c1df9ba8da4842359ed613e296387d32e5c
SSDEEP

1536:jwjSi9gnIVaXi6tzsc3OOXA3P+tj7nbdi5:jwjueaXi+zsc43PQjzbdu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36ddac4e66b39797868502c7602095b0N.exe

Files

36ddac4e66b39797868502c7602095b0N.exe
.exe windows:4 windows x86 arch:x86

ca97129e385d5ea8284da3d83242bd02

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpandEnvironmentStringsA
SetEnvironmentVariableA
GetEnvironmentVariableA
GetStartupInfoA
GetCommandLineA
lstrcmpA
VirtualAllocEx
GetProcAddress

user32

MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.v-lizer
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE