36e700e50a5b99e9bc801492b8a9cd1659a649af33cfee1b6a78532aee92c2feN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36e700e50a5b99e9bc801492b8a9cd1659a649af33cfee1b6a78532aee92c2feN
Size

2.0MB
MD5

829e799625377c2a9f612ff868ee65c0
SHA1

9a4721b7dfa6484b45925b4ef921af91fa7064ea
SHA256

36e700e50a5b99e9bc801492b8a9cd1659a649af33cfee1b6a78532aee92c2fe
SHA512

abd2808245e3be47a45d6a5e2085b39de926f2397c10c50cf04db50680319d3c6072dcf482dc544c3ffcc48f3f63ae8f0bf704855281044e56bb093e877eab57
SSDEEP

24576:q2DvS8kR70affMV5o6vTznoKM9vSSUugoqqnigPy812/Ia9A7ILwhsfJp8rcl/HL:G8kR7JfevjhqnuGW8rAiK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36e700e50a5b99e9bc801492b8a9cd1659a649af33cfee1b6a78532aee92c2feN

Files

36e700e50a5b99e9bc801492b8a9cd1659a649af33cfee1b6a78532aee92c2feN
.exe windows:4 windows

84fa6958c6e998ea445a5f3f73092b76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
VirtualAlloc

user32

GetDesktopWindow

Sections

.text
Size: 676KB - Virtual size: 676KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE