52a8a9736e94b9398ae0b365e5957434 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52a8a9736e94b9398ae0b365e5957434
Size

61KB
MD5

52a8a9736e94b9398ae0b365e5957434
SHA1

480369e23eb7921ef3bbc151658ed32fc001d8ff
SHA256

77e8ccf0be78d97733b890cdf1f3de3147e38a7bb15d94fe780218e5e1df3d7f
SHA512

0f4c0e0951b7f20009902f1a2410809d9432ca68c97b003d409d78a33b24b50a13632c0cc623c69ab2c49f1fa0ce0315946bca8714c6a8a32e7c64400a212ae9
SSDEEP

768:arGjt8xk7G2A2FPAf7FaNO2izBZfVr7/dY8HTaUuinQRyYw57K0iPorSzeUZAK+h:lPioKP7FYYTaPinQRyYw52PxiG+h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52a8a9736e94b9398ae0b365e5957434

Files

52a8a9736e94b9398ae0b365e5957434
.exe windows:4 windows x86 arch:x86

3110d7e54738c6958f95d873dfd8b384

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetLastError
GetModuleHandleA

user32

EnumChildWindows
MessageBoxA

Sections

.text
Size: 768B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 256B - Virtual size: 226B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE