52236b0da67eeec3dcdf6a970c48d1d925beb64ebe1d61fdffa468381490fd22 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52236b0da67eeec3dcdf6a970c48d1d925beb64ebe1d61fdffa468381490fd22
Size

2.5MB
MD5

79aeb642632982ed59ca0140c1070828
SHA1

3e31e5b8ca8d46e7f7137b5b179d4ab1ea137730
SHA256

52236b0da67eeec3dcdf6a970c48d1d925beb64ebe1d61fdffa468381490fd22
SHA512

c0e7c362a54766491217a6d3f4c9af252cd8973bcc217516283aac640dd6b8199bf528cde63b11969dacfb7ae3424f2688e6f9ea539572ded7cc4806d9fd6bfd
SSDEEP

49152:tjZxHcrhl7iccWjvb23jCbwTRt78lFGtnU2qBl+Fdwj4c0XtPPUoJ0h2q1:9cr7xjvb23ubmt7eQIB8Fdwj4cKtPPYH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52236b0da67eeec3dcdf6a970c48d1d925beb64ebe1d61fdffa468381490fd22

Files

52236b0da67eeec3dcdf6a970c48d1d925beb64ebe1d61fdffa468381490fd22
.exe windows:4 windows x86

34f3edee8a9b816216173f424a878026

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

CryptAcquireContextA

version

GetFileVersionInfoA

wsock32

WSAAsyncGetHostByName

winspool.drv

ClosePrinter

comctl32

FlatSB_GetScrollInfo

gdi32

AbortDoc

msimg32

AlphaBlend

shell32

SHGetFileInfoW

user32

ActivateKeyboardLayout

winmm

sndPlaySoundA

ole32

CLSIDFromProgID

oleaut32

CreateErrorInfo

gdiplus

GdiplusStartup

Sections

.text
Size: 2.5MB - Virtual size: 10.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE