52f67fa3b53f0d4ddd95475168ba7e0c

General

Target

52f67fa3b53f0d4ddd95475168ba7e0c
Size

41KB
MD5

52f67fa3b53f0d4ddd95475168ba7e0c
SHA1

98b56873c2a0c5ae1224b51b9a87030531bed749
SHA256

98ddcd142b307ddcea3dd5a1d7b7fd9b929ccea41695bd703d11b0d0fbb2c7fc
SHA512

b2d4b74485fbf96a8e9028e1f61e1ca7be78af3a997c4b8030564af297e743a646c46a14a651ca003bc0566a3b24466b985af1b302f8d803bbb1c7a8334b2b9f
SSDEEP

768:q+pdQ/K13UuVtQcs4yWTyKOKvxsj8oehi:q4QM2cs4yWOKbv9oehi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52f67fa3b53f0d4ddd95475168ba7e0c

Files

52f67fa3b53f0d4ddd95475168ba7e0c
.exe windows:4 windows x86 arch:x86

2d05680b386b482aa243152cf583e6d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetForegroundWindow
GetWindowTextA

advapi32

OpenSCManagerA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
ChangeServiceConfigA
StartServiceA
CloseServiceHandle
OpenServiceA
ControlService
CreateServiceA
DeleteService
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
SetServiceStatus

kernel32

FlushFileBuffers
FreeLibrary
SetStdHandle
CloseHandle
GetCurrentProcess
GetLastError
Sleep
WinExec
WriteFile
CreateFileA
DeleteFileA
lstrcatA
GetSystemDirectoryA
LockResource
LoadResource
SizeofResource
FindResourceA
lstrcpyA
Process32Next
Process32First
CreateToolhelp32Snapshot
OpenProcess
WaitForSingleObject
CreateRemoteThread
GlobalFree
GetShortPathNameA
GlobalAlloc
CreateThread
GetProcAddress
LoadLibraryA
GetVersion
GetModuleFileNameA
SetFileTime
GetFileTime
ReadFile
GetFileSize
ReadProcessMemory
MoveFileA
ExitProcess
TerminateProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetFilePointer
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d05680b386b482aa243152cf583e6d0

Headers

File Characteristics

Imports

user32

advapi32

kernel32

Sections

.text Size: 35KB - Virtual size: 35KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 35KB - Virtual size: 35KB

.rsrc
Size: 5KB - Virtual size: 5KB