7c37b530f533a283800bb212b87facb3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7c37b530f533a283800bb212b87facb3
Size

68KB
MD5

7c37b530f533a283800bb212b87facb3
SHA1

73da3cba5c132cfe80affed0c21091c26c9529b2
SHA256

07f7499868f50d1b204e91033f0116271ad3f7255ec223b43e812d848307e70b
SHA512

58aebe0adb6e7ce223cfe8ccbd9d49b314a3508a7ec8da083b8b2826201116c7601788a595ba360b58f5acaef699cecf27de54102028debb3156ad3e01fcc5f8
SSDEEP

1536:K08XMj9IiDJcvc8lQsJm8V4FnToIfbUo8BlW:KFyHJcnQsJmhtTBfbUo87W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c37b530f533a283800bb212b87facb3

Files

7c37b530f533a283800bb212b87facb3
.exe windows:4 windows x86 arch:x86

fb604fdf1abe348097e4c0bc3c1ce50c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32.dll.

ExitProcess
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetCurrentDirectoryA
FreeResource
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
LoadLibraryA
FindResourceA
GetSystemDirectoryA
GetTempPathA
GetCurrentThreadId
Sleep
MoveFileA
DeleteFileA
GetLastError
GetStartupInfoA
GetVersionExA
GetModuleHandleA
SizeofResource
GetProcAddress

user32

GetInputState
PostThreadMessageA
GetMessageA
FindWindowA
PostMessageA
GetProcessWindowStation
OpenWindowStationA
SetProcessWindowStation
OpenDesktopA
SetThreadDesktop
CloseWindowStation
CloseDesktop
wsprintfA
GetThreadDesktop

shell32

ShellExecuteA

msvcrt

__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit
??1type_info@@UAE@XZ
sprintf
rename
__CxxFrameHandler
_except_handler3
??3@YAXPAX@Z

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ