52f486e3e657b098b6e823362fdad6a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52f486e3e657b098b6e823362fdad6a6
Size

289KB
MD5

52f486e3e657b098b6e823362fdad6a6
SHA1

9051266cdb6b00b6ca6dbd8537e53ecf1bb5848a
SHA256

3f4a6afe2a458655d488df334da1804a84ca01b015ff96ca783ae710f25f990a
SHA512

db448a273eaf0fb2269e5a94e288f8b4b10e8b995901b62b388a03eca47b853b09da5449605b942fe917223872b3d0c7352d91781f2307d11f543de0ba502d67
SSDEEP

6144:VB+wrnm91woxGO+lr2Yzj1nOd3YWj3fs6eg1EmQ:VcwrnslglqYzROd3YeB7Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52f486e3e657b098b6e823362fdad6a6

Files

52f486e3e657b098b6e823362fdad6a6
.exe windows:4 windows x86 arch:x86

13a380d0688da8583f34506e346ea449

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
CompareStringA
GetCurrentProcessId
ReleaseSemaphore
DeleteAtom
GetStdHandle
DeviceIoControl
SetFilePointer
GetConsoleMode
GetModuleHandleA
FreeLibrary

user32

SendMessageA

Sections

bBPlAIXu
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

weAiIQZd
Size: 1024B - Virtual size: 666B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ZvWseGNM
Size: 259KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE