37a01ec509d1871f7f9a0cbdb3aeb640N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37a01ec509d1871f7f9a0cbdb3aeb640N.exe
Size

25KB
MD5

37a01ec509d1871f7f9a0cbdb3aeb640
SHA1

56361391d3e8b4b611945437daeda00e88841a00
SHA256

f95ecfe28aaaa5bd44a33c7ca1e6d92498f85119ff708e8ee47d29814e5aeae7
SHA512

e821a68aba10e8368af363353cac1c78f7b0860f60dc6d1a75ff63d06d75adee358fb6b1b8d762b23a748072f64d64b64e8cc9f33cf1e62a3c62d327606a6bbf
SSDEEP

768:Erz03d6NG429R3bcv5Dim896PpUkBAfVoBIG:EM3dgG42Jba5OB6P7AfVoJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37a01ec509d1871f7f9a0cbdb3aeb640N.exe

Files

37a01ec509d1871f7f9a0cbdb3aeb640N.exe
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE