52279408a85adbd7023b914068920a52 | Triage

Sharing

General

Target

52279408a85adbd7023b914068920a52
Size

5KB
MD5

52279408a85adbd7023b914068920a52
SHA1

19e986fbaaa59f1a8fb1e555f07e55053275c033
SHA256

202564276b46162671be256f4f381ad9f8ee01851bc15424978b0b093775c168
SHA512

1c56c47a581e825e77e7fc4a0f1c9f5e8d3abbf45afa1778b310971c2cf85e01fa48b0323d02a3de8d01a6e12afdd01b378b1d1d4506b270c6cfedcb0775af47
SSDEEP

96:nHUHOemeOYn/F17xl5E1jPqZ7SKTnjI9lswn8NQ8CW1oqWIW:HUvEPqZXnoswnj5W1x+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52279408a85adbd7023b914068920a52

Files

52279408a85adbd7023b914068920a52
.exe windows:4 windows x86 arch:x86

3a1c29c408fd0f35133fad861f9b8f07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA

kernel32

lstrlenA
lstrcpyA
lstrcatA
MultiByteToWideChar
GlobalFree
GlobalAlloc
ExitProcess

wsock32

socket
send
recv
htons
connect
closesocket
WSAStartup
WSACleanup
gethostbyname

advapi32

GetUserNameA
IsValidSid
LookupAccountNameA
LsaClose
LsaOpenPolicy
LsaRetrievePrivateData
ConvertSidToStringSidA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE