52784b73f63913a3df23ad8c915e29a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52784b73f63913a3df23ad8c915e29a8
Size

3KB
MD5

52784b73f63913a3df23ad8c915e29a8
SHA1

98059dd54d716daedcacd7c53ea8acb5b0970e13
SHA256

d876bf8c7880613ec71c2a65cd7da9c25b98a32e3a8530e5fb4ecf92829c53ba
SHA512

c7dc6feee093b9d205601aece0945d2b29704a74b1176dddf94e5c6f25beb21f85830f02f0ff38461b4bb9bcb419ae0dc40b1213060ef8ce330dcb2942200da0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52784b73f63913a3df23ad8c915e29a8

Files

52784b73f63913a3df23ad8c915e29a8
.exe windows:4 windows x86 arch:x86

bda7fceea26646428f68c9b0dc1c5b1b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateToolhelp32Snapshot
ExitProcess
GetCurrentProcessId
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTempFileNameA
GetTempPathA
GetVersion
CreateThread
Process32First
Process32Next
Sleep
VirtualAllocEx
WriteFile
WriteProcessMemory
lstrcmpiA
lstrlenA
CreateRemoteThread
CreateProcessA
CreateFileA
OpenProcess
CloseHandle

advapi32

RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegSetValueExA

wininet

InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE