37fa0e4237313a2615c5b30de5ca7148

Sharing

Copy URL Twitter E-mail

General

Target

37fa0e4237313a2615c5b30de5ca7148
Size

84KB
MD5

37fa0e4237313a2615c5b30de5ca7148
SHA1

2021c50069110725d6203fddd84ba5680b7ecd47
SHA256

a0d89d47cfdbed0026bacd975648ee254a1f3328fd96cf5830070257674193dd
SHA512

f4ebb321b93683b62fb0aeb6aad0866ff59c2a00bd11f360247cf058fe41732ade21d1f7dbef244d5c6cb57dc41160280ef1e5489e6586a8c79c8341f4142da4
SSDEEP

1536:VCHuTecjKdBgmPhIjDtVyxVRAOvURiNnF4fWv/a:wgayjZoli4NvS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37fa0e4237313a2615c5b30de5ca7148

Files

37fa0e4237313a2615c5b30de5ca7148
.exe windows:4 windows x86 arch:x86

7b7448d912e9fc3868caf843bb1c246a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumKeyW
RegLoadKeyA
RegDeleteValueW
RegDeleteKeyA
RegQueryValueExA
RegDeleteKeyW
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteValueA
RegEnumValueA
RegLoadKeyW
RegOpenKeyW
RegCreateKeyExA
RegEnumKeyExW
RegQueryValueW
RegOpenKeyA
RegEnumValueW
RegGetKeySecurity
RegQueryInfoKeyW
RegCreateKeyExW

gdi32

CancelDC
ExcludeClipRect
AddFontResourceExA
RestoreDC
AddFontResourceTracking
CreateSolidBrush
GetClipBox
AddFontResourceW
ClearBrushAttributes
ClearBitmapAttributes
CopyMetaFileA
GetPixel
GetPixel
GetBitmapBits
DeleteDC
GetCurrentPositionEx
ExtTextOutA
AddFontResourceA
BeginPath

kernel32

GetCommandLineA
GetDateFormatA
GetModuleFileNameA
GetModuleHandleA
lstrlenA
GetFileAttributesA
GetStdHandle
GetStringTypeW
HeapAlloc
WideCharToMultiByte
SetLastError
GlobalAlloc
GetLastError
GetFullPathNameA
GlobalFree
lstrcmpiA
lstrcmpA
lstrcpyA
GetFileType
GetFileSize

user32

GetWindowTextA
AppendMenuW
LoadCursorA
DrawTextW
GetCursor
DrawIconEx
BlockInput
DialogBoxParamA
InsertMenuA
DrawTextA
IsMenu
LoadMenuA
CreateIcon
GetFocus
GetMenu
CopyImage

comctl32

ImageList_LoadImageW
ImageList_DrawEx
ImageList_Create
ImageList_Destroy
ImageList_GetDragImage
ImageList_Draw
ImageList_AddMasked
ImageList_DrawIndirect
ImageList_GetImageRect
ImageList_GetIcon
ImageList_DragEnter
ImageList_Copy
InitCommonControls
ImageList_Merge
ImageList_Remove
ImageList_DragLeave
ImageList_LoadImage
ImageList_GetIconSize

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b7448d912e9fc3868caf843bb1c246a

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

user32

comctl32

Sections

.text Size: 8KB - Virtual size: 4KB

.data Size: 64KB - Virtual size: 63KB

.rdata Size: 4KB - Virtual size: 113KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 8KB - Virtual size: 4KB

.data
Size: 64KB - Virtual size: 63KB

.rdata
Size: 4KB - Virtual size: 113KB

.rsrc
Size: 4KB - Virtual size: 2KB