52d0e6eac74cd4add75c17999152cdbaf50475a319bea1408cd288a3d96ea87d

Sharing

Copy URL

Twitter E-mail

General

Target

52d0e6eac74cd4add75c17999152cdbaf50475a319bea1408cd288a3d96ea87d
Size

1.2MB
MD5

f348b864284933a5e440f175a3e2434e
SHA1

670ea6fd76be64539d8e58513be4711de4bc4f1d
SHA256

52d0e6eac74cd4add75c17999152cdbaf50475a319bea1408cd288a3d96ea87d
SHA512

b0b62c04d025bdd1f144945843ac2d872034a59bce2f850c5888a2f5e025c72b0aaf49ec1360d26a0baa503c4343a88814aef191e87ddd14a01897b3ec16d96c
SSDEEP

12288:NWXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:NWsqjnhMgeiCl7G0nehbGZpbD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52d0e6eac74cd4add75c17999152cdbaf50475a319bea1408cd288a3d96ea87d

Files

52d0e6eac74cd4add75c17999152cdbaf50475a319bea1408cd288a3d96ea87d
.exe windows x86

78fef6847b782983b50d3f845d10ed6c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

spupdate

_SPUPDATE_GetCtrlInfo@16
_SPUPDATE_Init@0
_SPUPDATE_Start@0
_SPUPDATE_GetVersion@0

kernel32

OutputDebugStringW
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
CreateMutexW
Sleep
MultiByteToWideChar
GetLastError
OutputDebugStringA
FreeLibrary
SetUnhandledExceptionFilter
GetCurrentProcess
InterlockedExchange
LoadLibraryW
GetModuleFileNameW
CreateFileW
GetProcAddress
GetCurrentThreadId
CloseHandle
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange

user32

wsprintfW

shell32

ShellExecuteW

msvcr90

_cexit
wcsncpy_s
wcsrchr
wcsncat_s
_amsg_exit
__getmainargs
memset
_exit
_XcptFilter
exit
__initenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.2MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

78fef6847b782983b50d3f845d10ed6c

Headers

DLL Characteristics

File Characteristics

Imports

spupdate

kernel32

user32

shell32

msvcr90

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1.2MB - Virtual size: 1.8MB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1.2MB - Virtual size: 1.8MB