52b21ac50f604f23d97aca3e2cf6c76f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52b21ac50f604f23d97aca3e2cf6c76f
Size

385KB
MD5

52b21ac50f604f23d97aca3e2cf6c76f
SHA1

84df79d2700029df5642ea67eafa02a4e4dd7cc4
SHA256

0db487e19ece3d9c597fe7e692927cf9332bb40926f8ee73a0067c28fb68ada4
SHA512

c90b624c963541313e4a931d3828314751240c31dfaa059f295d64e16c71767108b3af00aeb8522070d362317153c8843b51a401c98b7f53a2bb9ea1585d0686
SSDEEP

6144:cMrdbxohevqX1fMjk8XTg/cLTrJQvImZeHyYzwkXOpDloUBIDytnjG8ID7o1Bhrq:RrFG8qlMjkKTxricwTfOyty7o/u73

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52b21ac50f604f23d97aca3e2cf6c76f

Files

52b21ac50f604f23d97aca3e2cf6c76f
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.naked1
Size: - Virtual size: 804KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.naked2
Size: 380KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ