252f78a159a2448debe1be1f8c6c60d9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

252f78a159a2448debe1be1f8c6c60d9
Size

179KB
MD5

252f78a159a2448debe1be1f8c6c60d9
SHA1

221ac4c2c90bd5b4db725005bb920b959cc739c9
SHA256

f4f75cf67f4430fd3028a6379582387f9e41203ff4187915a7fd9ae64fbebe91
SHA512

351f87d9796a8aefa51a80f58e6823f606adae2af37e36877fa613510d6223434e111ce32ca3e0b29495f7ec52ce2299d6fd45170056312f755db0d75dcd9078
SSDEEP

3072:Kml51f17JXUOKa5twAS25citu6a9KVN7Oo3MDrvRtWU9S1D8i:KglvXlKUtwASYcj6awXV3MDrvEJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
252f78a159a2448debe1be1f8c6c60d9

Files

252f78a159a2448debe1be1f8c6c60d9
.exe windows:4 windows x86 arch:x86

f61471f82334e9d648c3e308a1273377

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

Shell_NotifyIconA

user32

ClipCursor
TrackPopupMenuEx
RedrawWindow
DestroyMenu
FindWindowA
CreatePopupMenu
GetDesktopWindow

rpcrt4

NdrFixedArrayFree
UuidCreate

winmm

timeEndPeriod

kernel32

FlushInstructionCache
DuplicateHandle
FindFirstFileA
GetModuleFileNameW
EnumResourceNamesW
SetEnvironmentVariableW
MapViewOfFile
UnmapViewOfFile
FindResourceExA
FindClose

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ