52da73e64c9f8aaed3477940e13703e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52da73e64c9f8aaed3477940e13703e2
Size

404KB
MD5

52da73e64c9f8aaed3477940e13703e2
SHA1

4a2ebac96cd16ded918a83a58da48277dc80584c
SHA256

d5688eb20a227ef95d0c85d36c234daa8a035708b8dfcf45da1d322ef2ed4bae
SHA512

ff805c77ececc350e7f3e8b57ac55bc07c61756e65ce0c63156027c1d9d46829f78959ad94349b5786616190cb728e6e7d71a9bf481fd8373ee79dfd112d3625
SSDEEP

12288:XU+M0CAAasny1VN35egD8EG+uS/kLp9PA48:XunQEgD8EG+IPPA3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52da73e64c9f8aaed3477940e13703e2

Files

52da73e64c9f8aaed3477940e13703e2
.exe windows:4 windows x86 arch:x86

0153631c563841f3521e8ff8a0546f79

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

OpenDriver
timeBeginPeriod
GetDriverModuleHandle
timeEndPeriod

shlwapi

SHDeleteEmptyKeyW
PathIsRootA

user32

ReleaseDC

advapi32

RegLoadKeyA

kernel32

HeapFree
GetProcessHeap
HeapAlloc
FlushViewOfFile
SetCurrentDirectoryA
lstrcmpA
CallNamedPipeA
GetSystemTime
GetThreadLocale
CloseHandle
DeleteAtom
GetExitCodeProcess
GetExitCodeThread
GetModuleFileNameA
GetModuleHandleA
GetCurrentThreadId
GetFileType
GetUserDefaultLCID
GlobalAlloc
SetFilePointer

msvcrt

toupper

version

GetFileVersionInfoA

ole32

OleRun

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 352KB - Virtual size: 351KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ