52d2350f17d70f0fe5ff130c77e1a4cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52d2350f17d70f0fe5ff130c77e1a4cd
Size

96KB
MD5

52d2350f17d70f0fe5ff130c77e1a4cd
SHA1

e3ffe3757c765bf86bb7810926e71fc69aa64fcc
SHA256

afdee889446d132222ec9293d21a79795509e83c2da130a4e3e22a93f2c664e3
SHA512

37e97ee091a3fe5ed6ebc857424fc3688b1e99eb7ff197a10be1af70879563cc5d9bbcda85e0204fb79bad47497afd02ef25fe44d3813d25d9519f1f753b431f
SSDEEP

384:pPyZNjtU2mwsrUxv9e9Xr6JGCyt1FWQRwArAk8tOzWqAklwZV:hyZcrs9W6sCyt1RwKAk8teWqAk2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52d2350f17d70f0fe5ff130c77e1a4cd

Files

52d2350f17d70f0fe5ff130c77e1a4cd
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnAHookAWindow

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ