052b8205d1613d18095b7b7573714e81 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

052b8205d1613d18095b7b7573714e81
Size

196KB
MD5

052b8205d1613d18095b7b7573714e81
SHA1

285f8b5bf8f2687502e8e6164cddea0c21c5ed43
SHA256

79c98885ff87f3db691f83c793c3a7b1cedcf4731d2a415d650967deb1651b80
SHA512

59beaa0e05b8c22fff0002f5981be40494dddcb9e457200988dadc2594ffebbf29b35d93a936eedaa396e28ec85c32a3b505cb7755600a4abcc78afaf233a26c
SSDEEP

3072:SpU3yRta0PrUN8wW/lvnl9RM7cH248zF29LOfB2uf6EB53Pu:SpxSKwmnvIMXEH/u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
052b8205d1613d18095b7b7573714e81

Files

052b8205d1613d18095b7b7573714e81
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.Upack
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE