52e92ae126e467189f9abc55d6d350f73babb62a336529045bf2316249dc7409 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52e92ae126e467189f9abc55d6d350f73babb62a336529045bf2316249dc7409
Size

211KB
MD5

829548f80efea9cdd0462783a742dd32
SHA1

913c83b89fcdab54381358e7ea4724020279bd24
SHA256

52e92ae126e467189f9abc55d6d350f73babb62a336529045bf2316249dc7409
SHA512

beb976d5ed748600ad77a431fd073dc8f0e7644df059ca681aad60902a6d0c9ea787c0b789c8778a1e60e5290c063525ce9b9b73f244da6908064206e1d3a480
SSDEEP

3072:BafeYWJx0Hk8UbkTSB496mpppppppppppspSp5bTuPrsr4r2d/Y:Bafel0HUbkPE6bYaWS/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52e92ae126e467189f9abc55d6d350f73babb62a336529045bf2316249dc7409

Files

52e92ae126e467189f9abc55d6d350f73babb62a336529045bf2316249dc7409
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ