52ce2aa195eac36e89679ee8bdd7cec847a9b2aef45fae3ee1768357c58cfbcd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52ce2aa195eac36e89679ee8bdd7cec847a9b2aef45fae3ee1768357c58cfbcd
Size

8.0MB
MD5

a9c7cf505a95eb2def0a90a255447159
SHA1

c3cf5349ab2122e02b5cd53237d93ff96b016d28
SHA256

52ce2aa195eac36e89679ee8bdd7cec847a9b2aef45fae3ee1768357c58cfbcd
SHA512

16c611b105cbd0b82f0f532a7378bed3ed9fa118d033f33d9f67af6ed5baf84bd06d8887e1a0b8307d7773397c21a307bf56d28c58a8b558570cabaebed5d76b
SSDEEP

196608:YbINLuY5itfmku4ptZIVvBi0Vqdp4+s0rouZAqswW5XuEM/duH9:YMumczpII0A3Tky/E5H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52ce2aa195eac36e89679ee8bdd7cec847a9b2aef45fae3ee1768357c58cfbcd

Files

52ce2aa195eac36e89679ee8bdd7cec847a9b2aef45fae3ee1768357c58cfbcd
.exe windows:5 windows x86

4f422e7a60d78b1b72047a1dc3f5e09c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GrayStringA

advapi32

RegCloseKey

oleacc

LresultFromObject

gdi32

ScaleWindowExtEx

winspool.drv

DocumentPropertiesA

oleaut32

VariantClear

Sections

.text
Size: 7.9MB - Virtual size: 11.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE