36fde35ed99b3d4434b6c7bde10e3ca67ab9b33f367e2fab521822afaba96593N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36fde35ed99b3d4434b6c7bde10e3ca67ab9b33f367e2fab521822afaba96593N
Size

16KB
MD5

871c98cd9a6892d25141e70796963730
SHA1

39f274175770dd01357683312eb89071b140a877
SHA256

36fde35ed99b3d4434b6c7bde10e3ca67ab9b33f367e2fab521822afaba96593
SHA512

bb7383b1a265e838e600d21656fe8798587c097ec16d65471cea03e977d4ca6389c80a96d416acc8c4fca3a79b94ad62971dcfecef23570a5a8ffc87005391af
SSDEEP

192:T56aRbBgLwX4vfQtAxdH0dHRdHwdHPH1SdHK18G+jgP:T56a5BgLwI3QtAxqrmuw+4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36fde35ed99b3d4434b6c7bde10e3ca67ab9b33f367e2fab521822afaba96593N

Files

36fde35ed99b3d4434b6c7bde10e3ca67ab9b33f367e2fab521822afaba96593N
.exe windows:4 windows x86 arch:x86

05ce55a96efb5b4f1eddcc1daab9679a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
OpenMutexA
Sleep
GetLastError
ExitProcess
CreateMutexA
OpenFile
CopyFileA
FindClose
FindFirstFileA

advapi32

RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE