37d94bd6f071d166da701f302c9cae02

Sharing

Copy URL

Twitter E-mail

General

Target

37d94bd6f071d166da701f302c9cae02
Size

392KB
MD5

37d94bd6f071d166da701f302c9cae02
SHA1

d04dcf52296af016720b6b3a7ce8f1609c709e55
SHA256

8fa345dddbb5c3de3f0f31fdb0a66aa4876679f21829cda501a46ef2be27353d
SHA512

7e5b1bedb56e7f33c3f6f94648e90b3d165c9f43517fd924fdccb5d4fb69c23f7332fb9ac63dba01b720908f341c188f2d48283486f4408040070f0de051e4a7
SSDEEP

12288:mAwqZKnA+IijIjqa0yk9PH6Ppw28671bYOP:/cc/QPuw2J7tYO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37d94bd6f071d166da701f302c9cae02

Files

37d94bd6f071d166da701f302c9cae02
.exe windows:4 windows x86 arch:x86

d34f8c6a4ad0b61aff0a635f862e242e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ExtractAssociatedIconExA
SHFileOperation
SheChangeDirExW
SHBrowseForFolderA
SHGetFileInfoA
ExtractAssociatedIconA
SHFreeNameMappings
SHUpdateRecycleBinIcon
DragQueryPoint
SHGetDiskFreeSpaceA
SHEmptyRecycleBinA

user32

ToUnicode
InternalGetWindowText
OemKeyScan
IsWindowEnabled
EndPaint
GrayStringA
DdeAccessData
ReplyMessage
RemovePropA
GetClipboardData
PaintDesktop
RegisterClipboardFormatA
GetClientRect
SendIMEMessageExW
SendMessageW
SetWindowPos

gdi32

SetWindowExtEx
GetSystemPaletteUse
SetWorldTransform
GetViewportOrgEx
BitBlt
GetKerningPairsW
UpdateColors
SetMetaFileBitsEx
GetCharABCWidthsW
SetMiterLimit
SetMetaRgn
PolyBezier

advapi32

RegEnumKeyExW
LookupPrivilegeValueA
LookupPrivilegeValueW
RegSetValueExA
CryptGenKey
RegQueryValueExA
RegOpenKeyExW
RegLoadKeyW
CryptSetProviderA
CryptDuplicateKey
CryptCreateHash
RegDeleteValueA
CryptDecrypt

kernel32

QueryPerformanceCounter
SetEnvironmentVariableW
FindResourceW
VirtualAlloc
GetCurrentProcess
InterlockedExchange
HeapDestroy
GetModuleFileNameA
GetCurrentThreadId
MoveFileExA
GetVolumeInformationW
HeapFree
GetProcAddress
TerminateProcess
EnterCriticalSection
GetEnvironmentVariableW
GetSystemTimeAsFileTime
ExitProcess
LocalSize
VirtualQuery
GetCurrentProcessId
GetTempPathW
HeapAlloc
RtlZeroMemory
SetEndOfFile
GetTickCount
GetModuleHandleA
RtlUnwind
HeapReAlloc
LoadLibraryA
ConnectNamedPipe

comdlg32

GetFileTitleW
PrintDlgA
FindTextA
PageSetupDlgW

Sections

.text
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 263KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d34f8c6a4ad0b61aff0a635f862e242e

Headers

File Characteristics

Imports

shell32

user32

gdi32

advapi32

kernel32

comdlg32

Sections

.text Size: 119KB - Virtual size: 119KB

.data Size: 263KB - Virtual size: 263KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 119KB - Virtual size: 119KB

.data
Size: 263KB - Virtual size: 263KB

.rsrc
Size: 8KB - Virtual size: 7KB