52de8bca95675f9c52b27d9d7c8f1fa2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52de8bca95675f9c52b27d9d7c8f1fa2
Size

1.5MB
MD5

52de8bca95675f9c52b27d9d7c8f1fa2
SHA1

8b1b52bef690ee3267d443af9e4b8769e2586259
SHA256

e51639950db4c24fb504e0ac0e11b5ab24e8c5028e01a04834ae94c89a3755b0
SHA512

8d8665bb3794375c9d4f794e26b653cac44b87ae465f05b67b6322d52f395a66d246a6ef2802af06229ed462581b8f351c7420594688e872290c253eaec16642
SSDEEP

49152:uiWaUWOpitJCmN5rSkXchuvYbh1zgl4NL:tNt5mJbbh1zeoL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52de8bca95675f9c52b27d9d7c8f1fa2

Files

52de8bca95675f9c52b27d9d7c8f1fa2
.exe windows:4 windows x86 arch:x86

209493325928d4a4543ce5356943745d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
RtlUnwind
GetCalendarInfoW
DeleteCriticalSection
GetStartupInfoA
EnterCriticalSection
ExitProcess
GetCPInfo
ReadFile
InitializeCriticalSection
SetEndOfFile
EnumResourceNamesA
VirtualAlloc
IsValidCodePage
GetACP
GetOEMCP
LeaveCriticalSection
FreeEnvironmentStringsA
HeapSize
SetFilePointer
RaiseException
HeapDestroy
VirtualFree
HeapReAlloc
SetEnvironmentVariableA

ole32

CoGetMalloc
CoInitializeSecurity
CoTaskMemFree
CoSetProxyBlanket
CoQueryProxyBlanket
CoInitializeEx
CoUninitialize
CoCreateInstance
StringFromGUID2

user32

IsWindow
SendMessageA
GetDlgItem
DestroyWindow
CreateWindowExW
EnumChildWindows
GetWindowThreadProcessId

rpcrt4

UuidCreate

Sections

.text
Size: 789KB - Virtual size: 789KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 793KB - Virtual size: 793KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 6.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ