37ea920ccc993ecf529a8f270817f65a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37ea920ccc993ecf529a8f270817f65a
Size

76KB
MD5

37ea920ccc993ecf529a8f270817f65a
SHA1

a95dc0ed4400a2f96f569a5462c1fe4b8043ce59
SHA256

762fe5f9887795b8d97d91e0261233422aea1b4b9af6b4f087eedcd58e28d595
SHA512

1bb7964ea12ceccbadd38bcaf697e76333a4674c71cc1fce0cbc21d0bd660d3576a57d5a19df24f6d3e13e3f27f358b60a472e6e593439ef46d6f2709fe1ae2b
SSDEEP

1536:FBzc48KszGguM+AJvhvWkGmu8jsCpggnwwdz2+:F7sz5T/Zv6nWwO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37ea920ccc993ecf529a8f270817f65a

Files

37ea920ccc993ecf529a8f270817f65a
.exe windows:4 windows x86 arch:x86

7583050d6a830edba8fcf4a428b33659

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
VirtualProtect
GetCalendarInfoA
Sleep
FindAtomA
FindVolumeClose
DeleteCriticalSection
GetTickCount
GetModuleHandleA
ReleaseMutex
SearchPathA
SetEvent
TlsGetValue
CloseHandle
lstrlenA
FindResourceExA
FindClose
CreateThread
GetLastError
GetStartupInfoA

advapi32

IsValidSid
OpenEventLogA
CloseTrace
LsaSetSecret
FreeSid
RegEnumKeyExA
LsaClose
LsaFreeMemory
RegCreateKeyExA
CloseEventLog
AccessCheck
RegCloseKey
RegLoadKeyA
GetFileSecurityA
RegCloseKey

msdtcuiu

DllGetClassObject
DllRegisterServer
DtcPerfClose
DtcPerfOpen
DtcPerfCollect

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ