52217e975f06b8f75bac8a0b6a7e8563

General

Target

52217e975f06b8f75bac8a0b6a7e8563
Size

27KB
MD5

52217e975f06b8f75bac8a0b6a7e8563
SHA1

513bb06f9ddee6e733d5900d8abfa8e9176c70e3
SHA256

85a826636b1148ca33498b2b86903330f7446cfcdc8cd5b35d2096812285f38f
SHA512

30f02ba5196c2b02a99aca324edbf335899643e940ce5a86e0acaa62d628243b426cbb34dc5db920dda2ca35f3abc44f2981f236e58d93f746fafa61db1691fa
SSDEEP

384:hCxzkVysVZf2ZrpkcUsM/B+jdYseNKl7bfAYlB/ZZE/cWC7YLGa3RG2F0MkJByAD:UghGYBOdEe7boYjDE/cuLvBGJBLgx0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52217e975f06b8f75bac8a0b6a7e8563

Files

52217e975f06b8f75bac8a0b6a7e8563
.exe windows:4 windows x86 arch:x86

447131ddc571a21f6dc4c3d75d7ee6d8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
LoadLibraryExA
GetProcAddress
GetModuleHandleA
GetLastError
CreateFileA
WideCharToMultiByte
WaitForSingleObject
Sleep
LoadResource
CloseHandle
DeleteFileA
ExitThread
GetFileAttributesA
GetModuleFileNameA
lstrcpyA
lstrcatA
CreateEventA
FindResourceA
ExitProcess
Process32First
LoadLibraryA
CreateToolhelp32Snapshot
CompareStringA
lstrcmpA
lstrlenA
SetEvent
LoadLibraryW
ResetEvent
WaitForMultipleObjects
CreateThread
WriteFile

user32

TranslateMessage
ShowWindow
DispatchMessageA
SetThreadDesktop
PeekMessageA
CreateWindowExA
FindWindowA
CreateDesktopA
MsgWaitForMultipleObjects
DestroyWindow
wsprintfA

advapi32

RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegLoadKeyW
RegEnumKeyA
RegCloseKey
RegDeleteKeyA
RegCreateKeyExA
RegNotifyChangeKeyValue

ole32

CoInitialize
CoUninitialize

shell32

SHGetFolderPathA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

447131ddc571a21f6dc4c3d75d7ee6d8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

shell32

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 13KB - Virtual size: 13KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 13KB - Virtual size: 13KB