37933c1cbb2adf08179198df4278bbaf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37933c1cbb2adf08179198df4278bbaf
Size

21KB
MD5

37933c1cbb2adf08179198df4278bbaf
SHA1

d86c76aa4a4900c6c67bf9f460ec6a20151cc062
SHA256

a043dddcb0830c9c4dbaf879514398cc029f529a073b7d90867f60311732b0c2
SHA512

22cd3d35398298b0895eff7e8d9b45e8aa508656dd75d431451b3ebe929e6a047b0f6752ca74eb7ccd5c0d8d63b0828ca3c8d8626d6843f57ef1fc68103104fa
SSDEEP

384:ixXYRPFOc3sC1oa7jABgRT40jkimnLZH6cicS+v9bgZc/MX:CXatB8Za7j1/jzmnL5HMMbgZQ4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37933c1cbb2adf08179198df4278bbaf

Files

37933c1cbb2adf08179198df4278bbaf
.dll windows:4 windows x86 arch:x86

dc249ecddad37af72d9fc233568d6ca1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileSize
CloseHandle
FreeLibrary
GetProcAddress
LoadLibraryA
Sleep
WriteProcessMemory
GetCurrentProcess
GetModuleHandleA
GetModuleFileNameA
WaitForSingleObject
GetLastError
CreateEventA
SetProcessShutdownParameters

user32

PeekMessageA

msvcrt

free
malloc
strlen
memcpy
strstr
_beginthreadex
sprintf
memcmp
_except_handler3
strcat
strncmp
_ftol
__CxxFrameHandler
_initterm
_adjust_fdiv
_strlwr

Exports

Exports

M

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 950B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ