52b6e2bf0ad17733698b58d0ae336973 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52b6e2bf0ad17733698b58d0ae336973
Size

863KB
MD5

52b6e2bf0ad17733698b58d0ae336973
SHA1

40f20ea3ec940d83956bbdaecea7a50f683950fe
SHA256

b25624dba54697bcc11c7104bd57299fafcd2f7a6ea2db41e6522c0aa66ef87d
SHA512

9ce9f4791ccbd719f2ed3cd08a1f5a2c8e834a5dd77b89c692e4d44e098de237df29f4374ed38688623bbeee63004a17ad278875234782b5b19361208348deee
SSDEEP

24576:ndb8VH71kfTa7WkAJ5eY4++KeQPdQP3tU8cJMMe:nCp+2ykAJ5T4+tu3mJ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52b6e2bf0ad17733698b58d0ae336973

Files

52b6e2bf0ad17733698b58d0ae336973
.exe windows:4 windows x86 arch:x86

9a06f276c201f82b5526ee06c590fc71

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

wininet

InternetGetConnectedState

Sections

CODE
Size: 828KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE