0b37a6639314e75902fbad20606dc207 | Triage

Sharing

General

Target

0b37a6639314e75902fbad20606dc207
Size

40KB
MD5

0b37a6639314e75902fbad20606dc207
SHA1

9889a6d47d3fd9406b422d73068de72ea0d00ca0
SHA256

8f7b93907378121851b0f22243566b718b53bd48d397fd0bdebd1ec11ec69b16
SHA512

a8af064580345d2928d5320401a1ab41c8584ba1d373d57f88ac33e94a43f8e7e0f3299358bdbf33196f66d38ad1de71238e1a61cb78e445f394b293c135e9cf
SSDEEP

384:ngzJAPtsymlHdxRyyNB9rFovXI0BLo4nvTsohPKL0Xydyv/hCuHd6s:u6tsfyQBVFoRtoOvTfhPKyv/hCOd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b37a6639314e75902fbad20606dc207

Files

0b37a6639314e75902fbad20606dc207
.exe windows:4 windows x86 arch:x86

705cbe71b06353bac3360f8e798fc146

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
FindFirstFileA
LoadLibraryExA
LoadLibraryA
CreateProcessA
WinExec
_lopen
CopyFileA
MoveFileExA
MoveFileA
OpenFile
CreateFileA
GetEnvironmentStringsW
SetHandleCount
GetStringTypeA
LCMapStringW
GetStringTypeW
MultiByteToWideChar
GetProcAddress
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
FindNextFileA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
WriteFile
LCMapStringA
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

FindExecutableA
ShellExecuteA
ShellExecuteExA

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE