37e3ac47bd8c2da32eaeb30c32acd236[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37e3ac47bd8c2da32eaeb30c32acd236.exe
Size

157KB
MD5

37e3ac47bd8c2da32eaeb30c32acd236
SHA1

f3d6eb018e282acb6899ae928cbfc72a12f0cb27
SHA256

c6471d152263e8021944477c1189dd98dbca257603a832138aa99c749072b01b
SHA512

5304a927552385bd477229fba3ef9537d12e30b65b84f53825d65bc90e1f40dc97adbca192151f016d7650aa379d533c9c50df625a246b8f2dba1e156580bb30
SSDEEP

3072:u4flqD/54RNb5+pi/oUIoZoI9Ai/iY0G2TNN58hC19HU7cqbSh:ZfwDB4x+eroZT3N5gAROuh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37e3ac47bd8c2da32eaeb30c32acd236.exe

Files

37e3ac47bd8c2da32eaeb30c32acd236.exe
.exe windows:4 windows x86 arch:x86

ea24632d093e05ed21274283190f71fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA

msvbvm60

__vbaVarSub

Sections

.text
Size: 21KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE