52688e96f023581156a6130619768057 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52688e96f023581156a6130619768057
Size

111KB
MD5

52688e96f023581156a6130619768057
SHA1

9644fa4200255cddc589fde6c518b89666c72f25
SHA256

267489388b732292e50f10e1bb4a2131bbf377aa0049ae31c6a8c5105a6185ff
SHA512

fb5e6b733fd251b81bbc1e277523b2986542f76fb06265c3b2a24ee52481755dae3d1a74177144eec3e63f9c0d7c44ada39ba87881e9c29f7dbfe0666e0e89fa
SSDEEP

3072:GkPIgRIHge/p3zxFPHyyIyeVH7UhLxsVvDSPOxf:BPmZ/p3tFvygeVH7UhdsNDSPaf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52688e96f023581156a6130619768057

Files

52688e96f023581156a6130619768057
.exe windows:4 windows x86 arch:x86

6bfa112ac3fcf28c9b00891ae0e9aee1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryExW
ConnectNamedPipe
GetConsoleCommandHistoryA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.code
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE