52d9d81088d997e8aa692cbfcf9ed06a868d8d6f38e3852b27a6e44c5f836757 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52d9d81088d997e8aa692cbfcf9ed06a868d8d6f38e3852b27a6e44c5f836757
Size

58KB
MD5

6f12c18136b68ca4f998e8566a0ab5d9
SHA1

9bacfa6355e3a4a90bd83f4fee08169538e92d92
SHA256

52d9d81088d997e8aa692cbfcf9ed06a868d8d6f38e3852b27a6e44c5f836757
SHA512

b1d993ddeab9dd11f620067123db9e921b8734a09efff1c8ee1fce7606b7b16ac88e1179d7c9d8f31f7109107bcba50f1499ba08666e64d10a28fbf5a8d7d1f2
SSDEEP

1536:W/28LXeCZiGMuwVZyxfRvBGWCDEp/cxrxznrAbmt:W/2CINZyxfR5GWp/cLDrBt

Score

N/A

Malware Config

Signatures

Files

52d9d81088d997e8aa692cbfcf9ed06a868d8d6f38e3852b27a6e44c5f836757
.exe windows x86

4099ddc5a4cf72d27b12ed57e9ee26eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetModuleHandleA
GetProcAddress
GetSystemTime
GetVersion
ExitThread
ReadFile
Sleep
VirtualAlloc
VirtualFree
WaitForSingleObject
ExitProcess
CreateThread
LoadLibraryA
CloseHandle

advapi32

RegEnumValueA
RegCloseKey
RegOpenKeyA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 246B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ