52aa87abc7fd2649a16a306636b816ff

Sharing

Copy URL Twitter E-mail

General

Target

52aa87abc7fd2649a16a306636b816ff
Size

122KB
MD5

52aa87abc7fd2649a16a306636b816ff
SHA1

3ccd1dea23f7cf4721f2cf2842c3a5e5d368564c
SHA256

56a0ec951fd68d95f56e2b39da22b739854fa088a3c30713578539f67158c0ba
SHA512

7b5439a66d3f9fb443c0bcc187636e0a1f6dbaefb404cb9e86d4ca8233119a8c69bdd2d78eb40d38bfd807d9fe80cf722cad51940f85b0ebcfca680a7c3e5cd9
SSDEEP

3072:f/NMomYZsm1txVIWTb8kcVTZ8fQqF6b7:dtf2ktDTTcuQxn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52aa87abc7fd2649a16a306636b816ff

Files

52aa87abc7fd2649a16a306636b816ff
.exe windows:4 windows x86 arch:x86

a39160740f78356119065c683fad745d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetDiskFreeSpaceA
SHFileOperationA
Shell_NotifyIconW

oleaut32

SysFreeString

advapi32

RegOpenKeyA

msvcrt

clock
mbstowcs
exit
memcpy
atol
tolower
sprintf
wcscspn
calloc
wcsncmp
wcschr

kernel32

VirtualAlloc
lstrlenA
GetLastError
ExitProcess
VirtualAllocEx
GetCurrentThreadId
GetLocalTime

shlwapi

SHDeleteValueA
PathFileExistsA
SHQueryValueExA
SHEnumValueA
PathIsDirectoryA
SHSetValueA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
FindTextA

gdi32

GetBkMode
GetTextAlign
CreateFontIndirectA

user32

SetRect
DrawIcon
IsChild
SetParent
GetKeyboardLayoutNameA
IsIconic
RemoveMenu
GetClassNameA
GetSysColorBrush
CharNextA
CreatePopupMenu
SetForegroundWindow
GetSystemMetrics
GetWindowTextA
AdjustWindowRectEx
MoveWindow
TranslateMessage
IsWindow
GetKeyboardType
SetWindowPos
LoadIconA
IsDlgButtonChecked
GetKeyboardState
RemovePropA
GetSysColor
GetWindowTextLengthA
WindowFromPoint
GetActiveWindow
FillRect
DestroyIcon
GetCursor
SetClipboardData
IntersectRect
LoadStringA
CharUpperA
SetCursor
GetWindowDC
ScrollWindow
GetClassInfoA
GetMenu
MsgWaitForMultipleObjects
UnhookWindowsHookEx
GetWindowRect
ReleaseDC
MapVirtualKeyA
IsWindowVisible
SetScrollPos
DrawTextA
SetWindowTextA
DestroyMenu
GetKeyboardLayoutList
EnumWindows
InsertMenuA
IsRectEmpty
FrameRect
IsMenu
DrawEdge
wsprintfA
DefMDIChildProcA
GetParent
GetMenuItemInfoA
GetLastActivePopup
GetClipboardData
InflateRect
EnumChildWindows
BeginPaint
RedrawWindow
CreateIcon
SendMessageA
SetPropA
IsWindowUnicode
GetWindow
ShowWindow
IsWindowEnabled
GetDesktopWindow
DrawFrameControl
SetCapture
GetClientRect
DestroyWindow
PostMessageA
FindWindowA
GetWindowThreadProcessId
ActivateKeyboardLayout
IsCharUpperA
IsDialogMessageW
DefWindowProcA
ReleaseCapture
OffsetRect
GetIconInfo
EnumThreadWindows
GetClassLongA
GetScrollPos

ole32

CoRegisterClassObject
CoUnmarshalInterface
OleCreateStaticFromData
CreateStreamOnHGlobal
StgCreateDocfileOnILockBytes

Exports

Exports

_wbKxErj@24
_xNTpeJaWJWiwMP@12
hzhyUtTE@12
_rpTX3PBWm
0GyyLi
9JDpFZr706R@12
_xIkbKNqOaVHq7@8
_GV6qNRw
vlhzRUwzp3mN3R
ckNTknpFORH
_WyDxEMs
_LmNQxjXYOvH
8jypLAYMv
_CeBYdXHaJnr69
_ZLe5Ttj5q
emt_oqQkiD
WI8orad9Be@4
z19sjpb
2T4tTbY2@20
rkhTITX6HXX
_oK_VWEt7E9DJ
_OU0Og6WN7Vs@24
_Jb_oWgsVh@8
_MWgXIoKEdp@16
kojRUOBzfenbH
GV1q6n
_zzeEH5@24
_nIOJS6I1W61X@12
ZeKMx
_yQPna@24
Ir4g13hBww@20
PLy18T8lzwMB6C
DrNqk
oNbF6f

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a39160740f78356119065c683fad745d

Headers

File Characteristics

Imports

shell32

oleaut32

advapi32

msvcrt

kernel32

shlwapi

comdlg32

gdi32

user32

ole32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 99KB - Virtual size: 211KB

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 99KB - Virtual size: 211KB

.rsrc
Size: 5KB - Virtual size: 4KB