37cfac1db93bdcd958bf408d7e96bbbe[.]exe

General

Target

37cfac1db93bdcd958bf408d7e96bbbe.exe
Size

183KB
MD5

37cfac1db93bdcd958bf408d7e96bbbe
SHA1

6ab6cf5dec019e3ca851dcad17eb39f88e48d744
SHA256

e0da614c119f64393ab2843e8aa4d837cfa878c9ef6a79be45ccf86217986f23
SHA512

c6b6beca68f13bfd26fce8ebc069439f7fbc67816b5258500f8bc10401230f3a444147ec443d6a2609034d1d0d40836d32fe07215c22f06a3d4d73aec8bbe7fd
SSDEEP

3072:wn2wA8ETb0D2v1NAW7MfT8+gALSBej+Ng5Dc6kYP28QwRevthaUyhpAhAqptTzmS:Ei0qvLABTymh+NgGYP28QEelDeqpxzq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37cfac1db93bdcd958bf408d7e96bbbe.exe

Files

37cfac1db93bdcd958bf408d7e96bbbe.exe
.exe windows:4 windows x86 arch:x86

337c9f4b62b845cd4860da5d8f479c2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

rpcrt4

UuidCreate

kernel32

SetEndOfFile
WideCharToMultiByte
WriteFile
GetThreadPriority
LCMapStringW
UnhandledExceptionFilter
IsValidLocale
IsValidCodePage
HeapReAlloc
GetCommandLineA
GlobalAlloc
SetupComm
GetCurrentThreadId
IsDebuggerPresent
GetModuleHandleA
HeapFree
DeleteCriticalSection
ReadFile
GetProcessHeap
HeapSize
InterlockedDecrement
WriteConsoleA
CloseHandle
GetCPInfo
GetCurrentDirectoryW
GetConsoleOutputCP
EnumResourceNamesA
RtlUnwind
ExitProcess
WriteConsoleW
LeaveCriticalSection
MultiByteToWideChar
SetUnhandledExceptionFilter
EnumSystemLocalesA
InitializeCriticalSection
GetCurrentProcess
GetLocaleInfoW
ExitProcess
CreateFileA
TerminateProcess
HeapAlloc
InterlockedIncrement
Sleep
GetProcAddress
GetUserDefaultLCID
GetLastError
GetModuleFileNameW
RaiseException
GetFullPathNameW
LCMapStringA
SetStdHandle
GetVersionExA
EnterCriticalSection
GetFullPathNameA

user32

GetAncestor
MessageBoxW

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

337c9f4b62b845cd4860da5d8f479c2c

Headers

File Characteristics

Imports

rpcrt4

kernel32

user32

shell32

Sections

.text Size: 160KB - Virtual size: 160KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 19KB - Virtual size: 19KB

.crt Size: 512B - Virtual size: 216KB

.text
Size: 160KB - Virtual size: 160KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 19KB - Virtual size: 19KB

.crt
Size: 512B - Virtual size: 216KB