036DCEA9AE308EE063N[.]cab | Triage

Sharing

General

Target

036DCEA9AE308EE063N.cab
Size

872KB
MD5

ea58dcd3554733275ad6738e286a16ed
SHA1

b612fbbffc7239c8eeaa775ef2a2dbab81c2d924
SHA256

02a1168ff52a8d0157d2896f2fa5278b96aea01a9f4cc4644232c538dcf0b38e
SHA512

d7d5f23bab581d36c981564803356ddf5c754ddfc879a9d4c4c42f006853e94b922f0e39c2ff8df0176b5762f6e616155e8a26c7fa3a7a48f0c88f057ac98abd
SSDEEP

24576:a3EdsDm6Gm5AQ6dG+jFi+wL4xCmd+DwgUvucB/p4:oEdJ6vVIG+jxw4C1DUGcBa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

unpack001/036DCEA9AE308EE063N.exe

Files

036DCEA9AE308EE063N.cab
.rar
036DCEA9AE308EE063N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

DoDW.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 884KB - Virtual size: 884KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ