52c46a9baa941c9aeb14d8bc441b05962cbd829f564a21010e3f8b63378a92f4

General

Target
52c46a9baa941c9aeb14d8bc441b05962cbd829f564a21010e3f8b63378a92f4
Size 202KB
Sample230920-3ng69sdc56
SHA256 52c46a9baa941c9aeb14d8bc441b05962cbd829f564a21010e3f8b63378a92f4
MD5 5f7013060ab42a96cfe414d29065f3d7
SHA1 85deb88b0c3340dc3fc5ed69150e136e12ee8fb4
SHA512 af7c6785f8b686911cb8aeee7cd1993044611880fbf24f519a6130eaedf06171bd6c1a4027611dc435a381acaa65a1d3e41d9f46a87fe4c88578f33c692f539f
SSDEEP 3072:+tXWFcvqgyO08cqZaRYe3eZvDwb3SBue+TEgtIAG5uBJT/:aEciy08cqWSERKgBh
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52c46a9baa941c9aeb14d8bc441b05962cbd829f564a21010e3f8b63378a92f4

File Explorer

52c46a9baa941c9aeb14d8bc441b05962cbd829f564a21010e3f8b63378a92f4

.exe 202KB

52c46a9baa941c9aeb14d8bc441b05962cbd829f564a21010e3f8b63378a92f4

IMPHASH 8a5878408e89d1fd5731f7a33cc8a29b
SHA256 52c46a9baa941c9aeb14d8bc441b05962cbd829f564a21010e3f8b63378a92f4
MD5 5f7013060ab42a96cfe414d29065f3d7
SHA1 85deb88b0c3340dc3fc5ed69150e136e12ee8fb4
SHA512 af7c6785f8b686911cb8aeee7cd1993044611880fbf24f519a6130eaedf06171bd6c1a4027611dc435a381acaa65a1d3e41d9f46a87fe4c88578f33c692f539f
SSDEEP 3072:+tXWFcvqgyO08cqZaRYe3eZvDwb3SBue+TEgtIAG5uBJT/:aEciy08cqWSERKgBh
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

22977

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempFileNameW EnumResourceNamesW SetFilePointer PeekNamedPipe SetConsoleTextAttribute OpenJobObjectA GlobalLock WriteConsoleInputA CreateHardLinkA FreeEnvironmentStringsA GetTickCount GetDateFormatA LoadLibraryW SizeofResource GetFileAttributesA FileTimeToSystemTime GetGeoInfoA CreateFileW SetThreadPriority GetLogicalDriveStringsA GetLastError GetThreadContext GetProcAddress VirtualAlloc BeginUpdateResourceW BackupWrite InterlockedExchangeAdd CreateHardLinkW FoldStringW GetModuleFileNameA FindNextFileA FindFirstChangeNotificationA GetShortPathNameW OpenSemaphoreW FindFirstVolumeW GetConsoleProcessList FindNextVolumeA HeapSize ReadConsoleOutputCharacterA HeapFree GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetStdHandle GetFileType GetModuleHandleW Sleep ExitProcess WriteFile GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA SetStdHandle GetModuleHandleA GetConsoleCP GetConsoleMode LoadLibraryA RaiseException LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetEndOfFile GetProcessHeap WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetClassInfoExA GetMessageExtraInfo LoadMenuA CharToOemBuffA

advapi32

InitiateSystemShutdownA

Sharing

General

Malware Config

Signatures

File Explorer

52c46a9baa941c9aeb14d8bc441b05962cbd829f564a21010e3f8b63378a92f4

kernel32

user32

advapi32