52c41c15fcb8d79b3f93d22f96284365 | Triage

Sharing

General

Target

52c41c15fcb8d79b3f93d22f96284365
Size

376KB
MD5

52c41c15fcb8d79b3f93d22f96284365
SHA1

c0c1ca79cc697caac8bd847ef2797860f05bc8f1
SHA256

bf0ac7ad1aa67d991a92b61a59737d4168eb0fba703b37ebfc4a063aed3f2b08
SHA512

ba7dddc92daf38edf4d75d19783d3d77ebf57386e81907048fec571dbf3e1bdd98e1314d3c5a77d1bb4d5c8dc222cd9bfeabfed18e91bfe4c4fc8d965e0a3e41
SSDEEP

6144:ISuh5VOR4Yq6zmQGvaKvy9Eg6Qpnv26t7evHs5cYm2vAVpQcUvC+b0UosKQgDf:ITh5VEzdf9pnv2acYDWWdvC+1osKQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52c41c15fcb8d79b3f93d22f96284365

Files

52c41c15fcb8d79b3f93d22f96284365
.exe windows:4 windows x86 arch:x86

db7ceb9ad517adb11b2e74a72165bf8b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

SHFileOperationA

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

comdlg32

GetOpenFileNameA

netapi32

Netbios

Sections

CODE
Size: 342KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE