52d637fb962aa0e058a0aa0c3f9efba6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52d637fb962aa0e058a0aa0c3f9efba6
Size

241KB
MD5

52d637fb962aa0e058a0aa0c3f9efba6
SHA1

040650f571fb23668589cdd17546f157760f1e5c
SHA256

715675f019a3d52c29235507a00b11fc7844d13512767c80f00fdc34aec6f9e2
SHA512

757d780ecc978862ff3ae7d11dd786909d1946407de8e044a614f1d4d5937d650728561fa2d5349f2adf1de86923afa33f2c718ad3ad073a8073d3ad689aca47
SSDEEP

6144:58hH4GHf1e5LuYrds4bRQOFzXLhjL5DMmTNlm:584Uf4xdoOtXVjL5fTbm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52d637fb962aa0e058a0aa0c3f9efba6

Files

52d637fb962aa0e058a0aa0c3f9efba6
.dll windows:4 windows x86 arch:x86

0bb6fc93cad17f90dd3377f61dfcb689

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
ExitThread
FlushFileBuffers
GetCommandLineA
GetConsoleCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
GetStartupInfoA
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetTickCount
HeapFree
LoadLibraryA
LocalFree
OutputDebugStringA
QueryPerformanceCounter
ReadFile
SetUnhandledExceptionFilter
VirtualAlloc
VirtualProtect

msvcrt

swprintf
strlen
wcscpy
fopen

user32

GetKeyState
GetClassNameA
PostQuitMessage
SetScrollInfo
TrackPopupMenu
UnionRect
DispatchMessageA
DeleteMenu
CheckMenuRadioItem
BeginDeferWindowPos
GetSubMenu

comctl32

GetEffectiveClientRect
InitCommonControls
MenuHelp
CreatePropertySheetPageA

Exports

Exports

B

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ