37854a797617cd19dc3344db01d0806a | Triage

Sharing

General

Target

37854a797617cd19dc3344db01d0806a
Size

20KB
MD5

37854a797617cd19dc3344db01d0806a
SHA1

9e5e0811d66456148efc79c716ca53400063ce34
SHA256

79eac76e7d64c655c322ba68e06c80ffd445e96464f1acecbf65e52af4fe3ce4
SHA512

feedca455e0b6b9d285a09c27465b00f4bc8d6882de2bf3fa6807ea6e98aabdff3929fbf87e821399348a4b6f4118d5d39032dc790c43ed692cb533dd81a379d
SSDEEP

384:RLDLmXrKHpllHiFEh8k1dvGp/SnQYCXtRoI/FI2XL3oHWquK:RLJJPiFHp4QTtM2zRY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37854a797617cd19dc3344db01d0806a

Files

37854a797617cd19dc3344db01d0806a
.exe windows:0 windows x86 arch:x86

ff3357c629adaa00f6f0d86be23f113e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
GetFileTime
CopyFileA
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetModuleHandleA
GetProcessHeap
ResumeThread
GetPriorityClass
OpenProcess
VirtualAlloc
VirtualFree
GetCurrentProcessId
SetLastError
CreateRemoteThread
GetProcAddress
FreeLibrary
GetVersionExA
GlobalMemoryStatus
CloseHandle

user32

CharLowerA

advapi32

OpenProcessToken
LookupPrivilegeValueA
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges

Sections

.text
Size: 19KB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE