37b5ef720d91e0952c36ef51136d5b594b1603dd9ba156890fb9a0b0cae05124 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37b5ef720d91e0952c36ef51136d5b594b1603dd9ba156890fb9a0b0cae05124
Size

120KB
MD5

42c22a682892faf026b8e89cbc091fc5
SHA1

f57d91d71d2b74b01c2801a54239faa182662650
SHA256

37b5ef720d91e0952c36ef51136d5b594b1603dd9ba156890fb9a0b0cae05124
SHA512

ea686fe5a35c1cf4ec6045e096f2656aa0d70e1d569335dd3b2158c4fe29e05d6ffbc2830d084042fe20004688912d4709d36791b0d67ee25ac82304ed8b7842
SSDEEP

3072:a7iDguV+dOayuqleF0yrVQXWABY5mdQGVd+I32z:iEayuLSysWABY5mdld

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37b5ef720d91e0952c36ef51136d5b594b1603dd9ba156890fb9a0b0cae05124

Files

37b5ef720d91e0952c36ef51136d5b594b1603dd9ba156890fb9a0b0cae05124
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ