37dfa3c8dd16b4229f5ea6bc2c7e2df7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37dfa3c8dd16b4229f5ea6bc2c7e2df7
Size

25KB
MD5

37dfa3c8dd16b4229f5ea6bc2c7e2df7
SHA1

b77b7144b0269f5f4e91bd4f79c1e757edda3ece
SHA256

af7595bcd4f3ed05df3b054bc966df557e0c675007a880553d0dad5db193aacc
SHA512

a1ac3d7496a0304072ef7291eb51db720048196456842d4561d65a894d77452bf7edcc869c6080be1e15de83575800997539f3186bbf609b847c1af0ca49538a
SSDEEP

768:gz/kelAeFevPrD12RkQErHriOI9Ip4wwwPYBfe:hPboyNrLBp4o2e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37dfa3c8dd16b4229f5ea6bc2c7e2df7

Files

37dfa3c8dd16b4229f5ea6bc2c7e2df7
.dll windows:4 windows x86 arch:x86

d58f292ffbd2b00fa779d18e5aac719b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualProtect

user32

CheckMenuItem
BeginDeferWindowPos
GetWindowDC
EndPaint
GetCursorPos

gdi32

LineTo
CreateCompatibleDC

Sections

.text
Size: 10KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pcle
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ