52c2172c6f41faada27e6e41c9779011

Sharing

Copy URL

Twitter E-mail

General

Target

52c2172c6f41faada27e6e41c9779011
Size

60KB
MD5

52c2172c6f41faada27e6e41c9779011
SHA1

299a241632a01e52722fd3b33e3ec72f86ab0f60
SHA256

f00fc8a6ba06086178c0309ab61ef248a18c12f919314bad9d410c9c8f5d7c60
SHA512

80e6ad869db0d99ef7b8847fa7125945c7f35da38dea0365822971412754c8b9a79aeea674e403c3a199fbd4ccb2d7df2eb553856f2dd0bbf35d2487ceb5ac93
SSDEEP

768:xnkoaEY/dhd5VgYu+wL63E9KNReAeU4vVoDkOu/KR68bUiUrbTbl4bBvc:xVaRhd5VgAw+3E96v4vVKAK8e5FE

Score

1^/10

Malware Config

Signatures

Files

52c2172c6f41faada27e6e41c9779011
.exe windows:4 windows x86 arch:x86

93b5201d57470bdee489ff3f4140bac0

Code Sign

05:a5:21:db:a1:89:4c:5f:b8:20:5e:5d:05:ef:9e:ca
Certificate

Issuer

CN=Root dddddd

Not Before

02/12/2009, 11:32

Not After

31/12/2039, 23:59

Subject

CN=trsfs.fgs,O=y,1.2.840.113549.1.9.1=#130a6361666763612e6a6f70

82:33:dd:6d:38:65:24:3e:b1:28:44:ba:93:7b:74:3d:4b:eb:66:23
Signer

Actual PE Digest

82:33:dd:6d:38:65:24:3e:b1:28:44:ba:93:7b:74:3d:4b:eb:66:23

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
VirtualFreeEx
VirtualProtectEx
ReadProcessMemory
WriteProcessMemory
CreateProcessA
GetModuleFileNameA
GetCurrentProcess
SetThreadContext
ResumeThread
GetThreadContext

advapi32.dll�

AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA

msvcrt.dll�

malloc
fclose
??3@YAXPAX@Z
fread
fseek
fopen
free

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cw
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CBtrl
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sha
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93b5201d57470bdee489ff3f4140bac0

Code Sign

05:a5:21:db:a1:89:4c:5f:b8:20:5e:5d:05:ef:9e:caCertificate

82:33:dd:6d:38:65:24:3e:b1:28:44:ba:93:7b:74:3d:4b:eb:66:23Signer

Headers

File Characteristics

Imports

kernel32

advapi32.dll�

msvcrt.dll�

Sections

.text Size: 2KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 16B

.cw Size: 512B - Virtual size: 512B

.CBtrl Size: 51KB - Virtual size: 52KB

.sha Size: 512B - Virtual size: 44B

05:a5:21:db:a1:89:4c:5f:b8:20:5e:5d:05:ef:9e:ca
Certificate

82:33:dd:6d:38:65:24:3e:b1:28:44:ba:93:7b:74:3d:4b:eb:66:23
Signer

.text
Size: 2KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 16B

.cw
Size: 512B - Virtual size: 512B

.CBtrl
Size: 51KB - Virtual size: 52KB

.sha
Size: 512B - Virtual size: 44B