52f2b36282e4f34f7d0bc6842abdaed1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52f2b36282e4f34f7d0bc6842abdaed1
Size

99KB
MD5

52f2b36282e4f34f7d0bc6842abdaed1
SHA1

22bb93c18b72c2ea0ffa30240dfc53d6e287a08b
SHA256

b3d8bff6b5607d66ce7dcd69e3f37de3708c1b875288b2a382995c336bc62f6e
SHA512

87feeab00425e9c54de1061d9297a30a2b80339ad4b5ae753f0a90251b7a32ee4c464f77c9d904fd0e4b1866076f34f2a67131a8a659aa8ad61395b1983457ad
SSDEEP

3072:Tn1sPyzul9tgSCGMhoy9sngRXSr/6VWacRLyANmJ:zm19tgSC7a1ngRiz6kR2HJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52f2b36282e4f34f7d0bc6842abdaed1

Files

52f2b36282e4f34f7d0bc6842abdaed1
.exe windows:4 windows x86 arch:x86

cee9eac69a32ee84176b5645b2cb5210

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
TryEnterCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
lstrcpyW
LocalHandle
CreateEventW
WaitForMultipleObjects
HeapSize
GetModuleHandleW
HeapAlloc
LocalHandle
GetEnvironmentVariableW
TryEnterCriticalSection
CompareStringW
MulDiv

Sections

CODE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ