37f1aa17b45ba6bac3dc987feed51277 | Triage

Sharing

General

Target

37f1aa17b45ba6bac3dc987feed51277
Size

809KB
MD5

37f1aa17b45ba6bac3dc987feed51277
SHA1

e78e385e5e16238889ebd933f6d1ca139a07979e
SHA256

e132565108cb63a3e24eb17b4e43834685efb50ef141dfcb5e8fe74708fb6542
SHA512

9eb11295c4cb831f025a793ed01d52f32df2a805fffbd4cd90524b2e53cf9712c2c6c9c9621575a2203a3d4e506d64e4186d31039eb6702b8164d8c86199ef3b
SSDEEP

24576:+Fb05b0gnC6Ma6OgHmN9VUU6dUpsFRxwZRFLZfA:+lYbDnCVaVgGNTUHdUpORxwTFLpA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37f1aa17b45ba6bac3dc987feed51277

Files

37f1aa17b45ba6bac3dc987feed51277
.exe windows:5 windows x86 arch:x86

ac1a0edaae73a94aebce863399e43f87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
HeapCreate
GlobalAlloc
GetTickCount
TerminateProcess
RtlUnwind
HeapAlloc
CreateFileA
ExitProcess

shell32

SHBrowseForFolderA

crypt32

CertFreeCRLContext
CertCloseStore

iphlpapi

AddIPAddress

secur32

CompleteAuthToken
QuerySecurityPackageInfoA

Exports

Exports

antiemu32

Sections

.text
Size: 799KB - Virtual size: 799KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bzzx
Size: - Virtual size: 930KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 969B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ