37b46476346cfc885e818f1cc41fcd81 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37b46476346cfc885e818f1cc41fcd81
Size

83KB
MD5

37b46476346cfc885e818f1cc41fcd81
SHA1

e226f62167a42134986795e410c7947b450708a7
SHA256

49edd65b1229801b546ffff87eb618d3bebeab0d632f8807ca065a5038508b02
SHA512

d10f4e256969e876ffa6d6baf117a6ec1eab0d75e2e627989638ba24e617a0b5382a50af164a3343a552500a082e4c9530e7966bff8082ff1b6f6103505bbf9d
SSDEEP

1536:iLrY1V5WylZVN7ciGKTFmLY3vn5uoTTvInDkpYFymbrpJvuNwpA5L2Akz+t:E81jWyNd3TFmUfn5fTTvIinmZJQ5jkzq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37b46476346cfc885e818f1cc41fcd81

Files

37b46476346cfc885e818f1cc41fcd81
.exe windows:5 windows x86 arch:x86

6101511b02f92f9203b5192bc2abeb32

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrToIntExA

user32

IsCharAlphaNumericA
GetDesktopWindow
GetDoubleClickTime
GetMessageA

kernel32

GetProcessHeap

Exports

Exports

?ForsakenQuantum@@YGKPAUHKEY__@@PAUHPALETTE__@@@Z

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.iat
Size: 512B - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data4
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data3
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data2
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data1
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ