52137456133a5ede70685cd2605e7013 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52137456133a5ede70685cd2605e7013
Size

31KB
MD5

52137456133a5ede70685cd2605e7013
SHA1

04c1531d596f4ba71a25ed35ea18d068b4cc292c
SHA256

dd466378d61eda2a7fd9415c66b2c60481afac82c5d81165935fc4c52bcd096d
SHA512

fe7588732cea223092685213e6282d35313a3763eae9d625391c5d1fc37c3975c58783092153ea8c03551dc4dfb9d70bc259fcc7364ea45c1368b9cd722c7971
SSDEEP

768:wWoD5mwIrJ+cCO1VWO6HxXD4QYu1sLy7Tz7q53op:weXwyVWOYdz253op

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52137456133a5ede70685cd2605e7013

Files

52137456133a5ede70685cd2605e7013
.exe windows:4 windows x86 arch:x86

b940cadb80c6ab17c0d6c9725b30af77

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameW
UnmapViewOfFile
HeapFree
lstrcpynW
GetFullPathNameW
SetEnvironmentVariableW
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
WideCharToMultiByte
Sleep
MoveFileW
GetSystemTimeAsFileTime
DeleteFileW
lstrcpyW
lstrlenW
GetEnvironmentVariableW

user32

MessageBoxA

Sections

.text
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 24KB - Virtual size: 15.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE