2e52fbd3ea9d8008f8c5f3dd27d006b1

General

Target

2e52fbd3ea9d8008f8c5f3dd27d006b1
Size

149KB
MD5

2e52fbd3ea9d8008f8c5f3dd27d006b1
SHA1

84ee8a162757c653c252032fce17a64daf4be053
SHA256

33d41da5489801239bb212144fa9ca2eea2efa273b33aa5d8ae839942b0fcd22
SHA512

e9241cd7005dd4a13629a86cf98643d0f83c04b56b28c6212e835bb72fb0a50577ee00839353c0c7787fca43490f894fb8651c1304a54a916b9de24d25090b60
SSDEEP

3072:GgDCrI6c6gYMb2tzOne280DuOPuHbuVI0IHd9nA6XJ16Y6k8po/kG6Koqi:ZDCTet2tY80DuOm7GIBH7ASJ1r6viXi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e52fbd3ea9d8008f8c5f3dd27d006b1

Files

2e52fbd3ea9d8008f8c5f3dd27d006b1
.exe windows:4 windows x86 arch:x86

3528914b40045571ca369395b4a19bf3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SwitchToThread
GetCPInfoExW
GetProcessHeaps
OpenWaitableTimerA
GetModuleHandleA
LocalFree
SetFileApisToOEM
GetExitCodeThread
WriteConsoleOutputA
LCMapStringA
GetLocaleInfoA
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
GetStringTypeW

user32

IsCharUpperA
FlashWindow
DefWindowProcA
DdeConnectList
PostMessageW
GetKeyboardLayoutNameA
GetWindowInfo

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3528914b40045571ca369395b4a19bf3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 30KB - Virtual size: 29KB

.rdata Size: 113KB - Virtual size: 113KB

.data Size: 4KB - Virtual size: 72KB

.text
Size: 30KB - Virtual size: 29KB

.rdata
Size: 113KB - Virtual size: 113KB

.data
Size: 4KB - Virtual size: 72KB