37fa9a3da97f88182c8282c57493bc4f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37fa9a3da97f88182c8282c57493bc4f
Size

222KB
MD5

37fa9a3da97f88182c8282c57493bc4f
SHA1

1ffb7e0bb8ebc91d48eeee40cceff1d1ceb6779e
SHA256

6f2ecc1f91c9e8bf9036eb61987dd37aceafa77f412c2e7046740bf9a62e3c2e
SHA512

c2daac3dc2bf1a6f43ba680f6f8efce03d70f2f8968176f5e660664d82b5c968ea4e42f246cee69e9da0c7d13199c200e032ca7cfd64aea9e332e16622b7ba2f
SSDEEP

3072:cPqIWHE/wcPyIXcGQQN6EfkhCANDHtBbh+0dVJbnAMhTCT8zPn9:ciIWEwVWcDi6EchC87fbEWVhAMhTo8x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37fa9a3da97f88182c8282c57493bc4f

Files

37fa9a3da97f88182c8282c57493bc4f
.exe windows:1 windows x86 arch:x86

89e0a22ae023971745abdf67e1d2262a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

mpr

WNetOpenEnumA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

SHGetFileInfoA

tapi32

lineShutdown

Sections

CODE
Size: 210KB - Virtual size: 704KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE