37d9ed84947d49cc136cde8cac0faa35

Sharing

Copy URL Twitter E-mail

General

Target

37d9ed84947d49cc136cde8cac0faa35
Size

234KB
MD5

37d9ed84947d49cc136cde8cac0faa35
SHA1

8cd2df762c35a3957e9aaada1ed3537e3728b27e
SHA256

6d4e0778baefcb7f954aab0683e718653ada05907227487c721619059fd1d970
SHA512

a9fa8baa40bd43f7f49c99c6ca83d62ae08f24696c021961ddf72d7f0595370993a055703a44082c0e2f5a471e58f3c272b4046d21ec62ae645ba8bea9e60554
SSDEEP

3072:5k5CfHlNXXv3m70LK3pDa9dn8NYxwjgI3lONa63AV/MdKTIM9XesrZXSJHcNMuer:WKHlNXXv806pqt8Ngah/fI8rZ8Hc/mX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37d9ed84947d49cc136cde8cac0faa35

Files

37d9ed84947d49cc136cde8cac0faa35
.exe windows:5 windows x86 arch:x86

5731069e43f079761c419077862446a4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

ChooseFontW
PageSetupDlgW
GetFileTitleA

oledlg

OleUIBusyW
ord9
ord2

kernel32

ReadConsoleInputA
SetConsoleMode
GetConsoleMode
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetLastError
HeapFree
CreateFileW
CloseHandle
HeapAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetHandleCount
GetStdHandle
GetFileType
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
RtlUnwind
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteConsoleW
MultiByteToWideChar
Sleep
ReadFile
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryW
GetStringTypeW
HeapReAlloc
GetConsoleCP
FlushFileBuffers
SetFilePointer
SetStdHandle
IsProcessorFeaturePresent
LCMapStringW
HeapSize

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5731069e43f079761c419077862446a4

Headers

DLL Characteristics

File Characteristics

Imports

comdlg32

oledlg

kernel32

Sections

.text Size: 44KB - Virtual size: 44KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 8KB - Virtual size: 15KB

.rsrc Size: 166KB - Virtual size: 165KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 44KB - Virtual size: 44KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 8KB - Virtual size: 15KB

.rsrc
Size: 166KB - Virtual size: 165KB

.reloc
Size: 4KB - Virtual size: 3KB