52ec82126261d8c49e4554b1122999eb

General

Target

52ec82126261d8c49e4554b1122999eb
Size

3.4MB
MD5

52ec82126261d8c49e4554b1122999eb
SHA1

d4641ce3e252bb14982809d235467f33b00a9487
SHA256

16ae7779b0d8a4a959812eae844cf3420d779d6588dc773c848229657c4beb8c
SHA512

23ed4b0efa74405ff036eba7c6190e2ed678d1bd4efdad6ac10b1e9ba137729550423176c593f366f728ae8b705a08c9fca5b62f8c92439249c7127a052cc252
SSDEEP

98304:Dntz7H7kHPzHGl5bibibQjlUOemr7jQ2R+iPItwjkfGj:LtzfkHPrGldKjlFee7jFR+0ItwjMW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52ec82126261d8c49e4554b1122999eb

Files

52ec82126261d8c49e4554b1122999eb
.exe windows:4 windows x86 arch:x86

8c2b2cdd0b6647d2fed26449bd2ba6fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetCurrentThreadId
GetCurrentProcess
GetCurrentProcessId
GetModuleHandleW
QueryPerformanceCounter
CloseHandle
TerminateProcess
GetTickCount
WideCharToMultiByte
HeapFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WriteFile
CreateFileW
GetStdHandle
GetStartupInfoW
ReadFile
RaiseException
SetEvent
TlsGetValue
GetModuleHandleA
GetConsoleMode
FlushFileBuffers
TlsAlloc
HeapSetInformation
HeapSize
LoadLibraryExW
TlsFree
RtlUnwind
LCMapStringW
InitializeCriticalSectionAndSpinCount
GetOEMCP
SetStdHandle
FreeEnvironmentStringsW
IsValidCodePage
FindFirstFileW
DeleteFileW
GetCommandLineA
ResetEvent
CreateFileA
OutputDebugStringW
EncodePointer
lstrlenW
LoadLibraryA
CreateDirectoryW
GetFullPathNameW
LoadResource
UnmapViewOfFile
GetExitCodeProcess
ExpandEnvironmentStringsW

user32

LoadStringW
ShowWindow
DestroyWindow
MessageBoxW
PostQuitMessage
GetDlgItem
GetSystemMetrics
GetWindowRect
GetClientRect
EnableWindow
GetParent
EndPaint
BeginPaint
ScreenToClient
SetCursor
InvalidateRect
RegisterClassW
EnableMenuItem
GetWindow
GetWindowTextW
UpdateWindow
GetKeyState
MessageBoxA
CharUpperW

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c2b2cdd0b6647d2fed26449bd2ba6fe

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 6KB - Virtual size: 6KB

.idata Size: 2KB - Virtual size: 1KB

.data Size: - Virtual size: 612KB

.rdata Size: 3.4MB - Virtual size: 3.4MB

.text
Size: 6KB - Virtual size: 6KB

.idata
Size: 2KB - Virtual size: 1KB

.data
Size: - Virtual size: 612KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB