037f7ba346463bb27060d660aaa5a135 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

037f7ba346463bb27060d660aaa5a135
Size

461KB
MD5

037f7ba346463bb27060d660aaa5a135
SHA1

f2d7484d1e2bc6424a44d0caba3ba87da51215cf
SHA256

13b808446a3aed60e545e79693bdea70bd464010c3e7c3029c25d91856c9cd45
SHA512

776e78c44dce77f99fdb969d2472922a22250627e9dfa134e68d28c5662df4544582052956d1bf77b579886c5502c206158ccd5edcc5d9647d0dc0dc8b3ac595
SSDEEP

12288:UWcg9RyHQh8k1DzrPpgHD/MviYW2cbZMIZRu:bcg9YwhvOHIviprbfE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
037f7ba346463bb27060d660aaa5a135

Files

037f7ba346463bb27060d660aaa5a135
.exe windows:1 windows x86 arch:x86

033b4548ad1b07d15ca4999fabf75b1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
FindResourceA
GetModuleHandleA
GetProcAddress
GetTempPathA
LoadLibraryA
LoadResource
LockResource
RtlZeroMemory
SizeofResource
WriteFile
lstrcatA

Sections

.data
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 461B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 459KB - Virtual size: 458KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ