52ea9d3e39e81b010446f8c2461bad2a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52ea9d3e39e81b010446f8c2461bad2a
Size

512KB
MD5

52ea9d3e39e81b010446f8c2461bad2a
SHA1

14be9744bcc21a55f7bf25e2eda918d9a780c464
SHA256

e9a4aaed9bc3984706edbafafb3467d121a2364f40ee651760fafc04eabde44f
SHA512

06aa98ff1ca3ae09c78eaa05f69b56f1df307ea8ac543591de2ded1f2a96e5bb301269991f2b0001462efa9ae0670356371f8ca3e3a418c0c9f6daaa44be818e
SSDEEP

6144:pkIOP9p52JtMuW2KtX67W8jHfUnJlWDkKhovKrUSrzkOwRs:pkIyhseusQW8QJlpKhgSrzkO8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52ea9d3e39e81b010446f8c2461bad2a

Files

52ea9d3e39e81b010446f8c2461bad2a
.dll windows:4 windows x86 arch:x86

4ae8cce1cdb668a8fad907517a62efc7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
ReplaceFileA
Beep

Exports

Exports

bvragtn

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 526B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 452KB - Virtual size: 451KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ