52eb53979d6939f8cc369f8615e4b8d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52eb53979d6939f8cc369f8615e4b8d2
Size

53KB
MD5

52eb53979d6939f8cc369f8615e4b8d2
SHA1

b9dc79c125ae33602f0b7589e95cb86d177d1505
SHA256

14f12a18c0f7ea5bfcfd1f702a7d7b49a1077d82b4d60fd5e75a6d1c512f9ed1
SHA512

2a8f1adb14bb45c630dce35375189ebd7a1e93c207c3064011d6a8c70d817d7b41b165c86193974368778e1b5d663c010f47bc6f3a8733e4b10722d36d3f4554
SSDEEP

768:q2/6mNQF2sgyqi8cHXZJhxfolo5GyS6yIr10Sjcvh4fTzlimnjCne1UR90E:q2iZn38eJJkl+ruIr10Sjc8zltnjCg6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52eb53979d6939f8cc369f8615e4b8d2

Files

52eb53979d6939f8cc369f8615e4b8d2
.exe windows:5 windows x86 arch:x86

afaf9534eae9fd7dbdb1a2f73865be95

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA

shlwapi

PathCombineW
PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
SHDeleteKeyA
StrStrW
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

DispatchMessageA
GetClipboardData
GetForegroundWindow
GetKeyState
GetWindowLongA
GetWindowTextA
LoadCursorA
OpenWindowStationA
SendMessageA

Sections

.wbevkx
Size: 43KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.exuj
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hgjqr
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ