37163807325e01dcc975774bd5893f83 | Triage

Sharing

General

Target

37163807325e01dcc975774bd5893f83
Size

5KB
MD5

37163807325e01dcc975774bd5893f83
SHA1

4388a8ac66c4b23ebbac7635173d9855877deaa9
SHA256

db6e99dd9945d1dbff4c428cea65722903239f0e045763115c857ffc87db96ed
SHA512

567905929be743c6b26adcfdd1efe3523af88d2ad746c1cd2402dec90ea30fce10705f4a0fb6d68c0af72dd4333ed3c63f28481de343ee29772d2990c9933bfb
SSDEEP

48:6a8WiEtohcUyiFsslcHrDpY1lj60RzLCm72WZtuu5:ZtUDyHB5+zLC9WZtuU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37163807325e01dcc975774bd5893f83

Files

37163807325e01dcc975774bd5893f83
.exe windows:1 windows x86 arch:x86

97fe8ff35922484a237a3037b27f6ca8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetModuleHandleA
RtlUnwind
WinExec
lstrlenA

user32

RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
CreateWindowExA
DefWindowProcA

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA

crtdll

__GetMainArgs
exit
raise
signal
strchr

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 8B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 380B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 920B - Virtual size: 920B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE