252cae0537d8c3aa42d8e69ad802b966 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

252cae0537d8c3aa42d8e69ad802b966
Size

224KB
MD5

252cae0537d8c3aa42d8e69ad802b966
SHA1

7d5a78867737c91bb9cfbd88a3aa20c89900fdb3
SHA256

8e166eb3487a243e21ddcfa8a88173a7f1b2b37de18a55f4517003027547fef6
SHA512

b3982c428630e951e9fe95a4660d4cfe3e08be786082d4935dd3c1ac12036f9f1cc6a0a14536e79156f6b7d6474d9ddbce2996fb932ee4006c9775a65c2dfeef
SSDEEP

6144:cxB+lzu0FKw3wIZ6ifYfFPxhypIahW9LYJvtKs5xi:cb+Zu0FKw0ZhOIm7GUi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
252cae0537d8c3aa42d8e69ad802b966

Files

252cae0537d8c3aa42d8e69ad802b966
.exe windows:6 windows x86 arch:x86

76cb49957629b5fe0d40d13588a8762e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
WriteFile
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
GetModuleHandleW
GetProcAddress
LoadLibraryA
LocalFree
lstrlenW
WideCharToMultiByte
EnumTimeFormatsW
GetConsoleOutputCP
WriteConsoleW

user32

LoadStringW
MessageBoxW

ole32

OleInitialize
OleUninitialize

msvcrt

towlower
malloc
memset

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 966B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 914B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ