37a45831860b11711d10bb744dcfe3b26237ad3e1e2766728db0faaefa796807 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37a45831860b11711d10bb744dcfe3b26237ad3e1e2766728db0faaefa796807
Size

120KB
MD5

f55d4658c25283fe1ba800cef1c5af7a
SHA1

9271efe3be67fb6c1a03301e4467f5e9613ad1cd
SHA256

37a45831860b11711d10bb744dcfe3b26237ad3e1e2766728db0faaefa796807
SHA512

98e5ba0c8af717862eda6db94b47e98e46216ed6d32692820e4a0b13ecd8181abc363a37501e14dfc129e7730a7f0f4900fc60c01f731e39629ef8301ec9ffe6
SSDEEP

3072:JDiC0/KLDAlM+bVLohOzbKIj9/17lN77uGbim:J2QLDYM+behQvxN7lNOG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37a45831860b11711d10bb744dcfe3b26237ad3e1e2766728db0faaefa796807

Files

37a45831860b11711d10bb744dcfe3b26237ad3e1e2766728db0faaefa796807
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ