37a2a2a0e0f34d6f7e3a1d954cd2a2c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37a2a2a0e0f34d6f7e3a1d954cd2a2c2
Size

28KB
MD5

37a2a2a0e0f34d6f7e3a1d954cd2a2c2
SHA1

cc994859a397860800e0dac8dbc7e57ceb7606fc
SHA256

b16c25bb0513bb2cb34455f73dfa69cd7cd7094a3632a92a8041b7c385b3537c
SHA512

8aa2795c10f41e33fcf32e72a15ded7d7c35fb842f5ac4c21f4d5db9bbaa34a19bf031d6b47c2849bb921479f1e2be807807c7b95a89dd8b3e22eaeece01cb5b
SSDEEP

384:UmOyMLjKMPH1Dxw7ZA8l9ZoA7k+w9G5hmssR0IkR46nzojn8mgRRtssIeo/r5J1w:hUjKVjl9xw3x6nz7vj1wru

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37a2a2a0e0f34d6f7e3a1d954cd2a2c2

Files

37a2a2a0e0f34d6f7e3a1d954cd2a2c2
.exe windows:4 windows x86 arch:x86

28c6ef1128d2dc0d513ddf64919b7716

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ