37ef19adb3f962105f95912dd534c63099f21c09f05837074a38db1115ddf7c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37ef19adb3f962105f95912dd534c63099f21c09f05837074a38db1115ddf7c2
Size

720KB
MD5

423a61721f5988a72d9aeca6c52bef50
SHA1

1474987e3c5a4c03547228beae528fcef77cf4d7
SHA256

37ef19adb3f962105f95912dd534c63099f21c09f05837074a38db1115ddf7c2
SHA512

935b871fd9d335ae4b7a12347ec049d86a8ec9fa16618bce615e9f34ee5d79b81412e5f91adf2d985d6b56e2c516e52a13b290d1238d098c16436e06d59e50d5
SSDEEP

12288:W02iNJyvK/w6ntbZltsZg5rZuuXOFg20dc4bHsWE28TuXwhP5nBVkiK+kcn55:P1DyItbZ7sZoZuu+GU4bHsWj8TfDnUiv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37ef19adb3f962105f95912dd534c63099f21c09f05837074a38db1115ddf7c2

Files

37ef19adb3f962105f95912dd534c63099f21c09f05837074a38db1115ddf7c2
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

waGA.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 717KB - Virtual size: 717KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ