520bf11f9668966729309415473cd04f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

520bf11f9668966729309415473cd04f
Size

164KB
MD5

520bf11f9668966729309415473cd04f
SHA1

b7fcd0e3107b7c64e9637a529082e7ca183aa324
SHA256

e3a58bc474d94a94b58cbbf1f0e41360c221ced3a0bc91cdfccace38e37b0da0
SHA512

aab6c93e7ee0d75b93218ebc888b4cb19041e895f1b2744a9a451f97325f8a769d068b324c441b15d5279f8c963a5817dd4646ca81c25ad8f0ba077756095f0c
SSDEEP

3072:C4faVZhnH5cErnP2weAK9gz7J8JRGdBYuqQWq1B6vG4fB+imtYotG4QceoWJXTIZ:JaVDnZXT2TAK9gAogufHtHimtN4NceoV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
520bf11f9668966729309415473cd04f

Files

520bf11f9668966729309415473cd04f
.exe windows:4 windows x86 arch:x86

02ac44e3684c57029c803f2d4ebe9ce5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

ReleaseCapture
RealGetWindowClassA
ExcludeUpdateRgn
ValidateRgn
InvalidateRgn
GetCapture
ValidateRect
SetCapture
GetUpdateRgn

kernel32

GetNextVDMCommand
FindFirstFileW
FindClose
GetShortPathNameW
GetStringTypeW
SetThreadPriority
FindResourceW
CompareStringA
SetEnvironmentVariableW
GetLocalTime
FindNextFileW
EnumResourceNamesW
SetCurrentDirectoryW
SystemTimeToFileTime
FileTimeToSystemTime
SetErrorMode
RegisterWaitForSingleObject
LoadResource
FileTimeToLocalFileTime
FreeLibrary
LocalFileTimeToFileTime
SearchPathW

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imul
Size: 1024B - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ