37d1064f519832b54ac1452de8e16fc1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37d1064f519832b54ac1452de8e16fc1
Size

52KB
MD5

37d1064f519832b54ac1452de8e16fc1
SHA1

f8ac12934c08bcdc3f6d6662c97c05b43351d712
SHA256

9a710860acfa10028f14af2a25de357c4425313cb0d87768fff60c6a05d35e4c
SHA512

842d6e2fcfab6af26f717416531ba48783e1c79226da6486ecbed5700c338b7fa6b1261fe0364724d650dbcb352e9629728c3ace7ebaf91b367a1d04c0cc102e
SSDEEP

1536:tZAXJ2UvU2Iz/OsqX/ubbQ6kj0C7fp/Qjtt:AXAUU3TP+mbbgWt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37d1064f519832b54ac1452de8e16fc1

Files

37d1064f519832b54ac1452de8e16fc1
.exe windows:5 windows x86 arch:x86

ede78a01b6a95eb3f49418c833caa679

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtectEx
GetCommandLineA
GetModuleHandleA
ExitProcess
SetConsoleScreenBufferSize
Heap32ListFirst
GetLastError

advapi32

AdjustTokenPrivileges

Exports

Exports

Trdjgqtrktr

Sections

CODE
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ecode
Size: 4KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.isect
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.icode99
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ