52ac85cb020388f55f4b9039c3bb4401 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52ac85cb020388f55f4b9039c3bb4401
Size

20KB
MD5

52ac85cb020388f55f4b9039c3bb4401
SHA1

cb3818691b561dbbc73a45bf7eb1c81b8e4c80fc
SHA256

cab471d40d49640beeb0250e5417aed451d0c6f046b188c97e39e986ee0a27a9
SHA512

b94d083ed8de3dcc71380e68af28489a5ca0c9adedd25e23c9a19a852b8fbc360a971a398e5cab1ee5c55c274b90b876f6127111af82714541422b2209e8c995
SSDEEP

96:nPy66826YrOOPHDNEAe7JVX295gIx0v1wMRkds+k4w:n61lO6HBE/1VX2IP1wMRkda

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52ac85cb020388f55f4b9039c3bb4401

Files

52ac85cb020388f55f4b9039c3bb4401
.exe windows:1 windows x86 arch:x86

bf4d05134afe96ee9cb1e6dfb926ef68

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

WaitForSingleObject
ReadFile
CreateThread
CopyFileA
CreateFileA
CreateProcessA
CloseHandle
DeleteFileA
DeviceIoControl
ExitProcess
GetCommandLineA
GetModuleFileNameA
IsDebuggerPresent

advapi32

RegSetValueExA
RegCreateKeyExA
RegCloseKey

user32

PostMessageA
LoadIconA
GetDC
FindWindowA
DrawIcon

Sections

CODE
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ