b52c9f86d85da1ed214e0f158768e94f

Sharing

Copy URL Twitter E-mail

General

Target

b52c9f86d85da1ed214e0f158768e94f
Size

425KB
MD5

b52c9f86d85da1ed214e0f158768e94f
SHA1

16dce4fe8ea8f9cb1cc5def03f848e22084ed20a
SHA256

32e7537db6a675e1ec104f40e2e221c306b3a95dba47d99fe73a0c9e69d25e5b
SHA512

28a989ceabcd719bdd0f2364503bc11c1d7f9ea08d47bce1c67e54dcff47161a5dd4cd862634a3d28877d36aba0d069ba8edde919610c5518f005a234592e97a
SSDEEP

12288:3ez6VYtlUd/NDyBdapbjoC6qrDz4c+FpavV:5yle/FyBdsbUCZcc+zi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b52c9f86d85da1ed214e0f158768e94f

Files

b52c9f86d85da1ed214e0f158768e94f
.exe windows:4 windows x86 arch:x86

ed11aea129838323d0d8aaad14c3ccfa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLocalesA
GetEnvironmentStringsW
FormatMessageA
GetCurrentProcess
GetSystemTimeAsFileTime
SetLastError
GetCommandLineW
CompareStringW
GetUserDefaultLCID
GetLocaleInfoA
TlsGetValue
HeapFree
TlsFree
GetCPInfo
SetEnvironmentVariableA
FindFirstFileA
GetModuleHandleA
IsValidLocale
ExitProcess
GetTimeZoneInformation
FindResourceA
HeapReAlloc
IsValidCodePage
IsDebuggerPresent
LCMapStringW
WideCharToMultiByte
GetCurrentProcessId
DeleteCriticalSection
GetCurrentThreadId
SetUnhandledExceptionFilter
HeapCreate
EnterCriticalSection
GetModuleFileNameA
VirtualAlloc
FreeEnvironmentStringsW
SetConsoleCtrlHandler
GetPrivateProfileSectionA
lstrlenW
InitializeCriticalSectionAndSpinCount
GetFileType
GetLocaleInfoW
CompareStringA
InterlockedDecrement
HeapSize
GetConsoleMode
GetTickCount
Sleep
GetModuleHandleW
InterlockedExchange
RtlUnwind
GetStartupInfoW
MultiByteToWideChar
GetStartupInfoA
GetOEMCP
LeaveCriticalSection
LoadLibraryA
GetModuleFileNameW
FreeLibrary
SetHandleCount
GetProcAddress
GetStringTypeA
TlsSetValue
GetLastError
LCMapStringA
GetTimeFormatA
QueryPerformanceCounter
OpenWaitableTimerW
VirtualQuery
HeapDestroy
WriteFile
GetStdHandle
GetStringTypeW
GetCurrentThread
TlsAlloc
GetDateFormatA
TerminateProcess
IsBadWritePtr
HeapAlloc
VirtualFree
InterlockedIncrement
UnhandledExceptionFilter
GetACP

wininet

ShowCertificate
InternetOpenW
FtpRenameFileW

user32

DdeQueryNextServer
AdjustWindowRect
GetMenuDefaultItem

shell32

ShellExecuteA
SHUpdateRecycleBinIcon

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 280KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ed11aea129838323d0d8aaad14c3ccfa

Headers

File Characteristics

Imports

kernel32

wininet

user32

shell32

Sections

.text Size: 129KB - Virtual size: 129KB

.rdata Size: 8KB - Virtual size: 32KB

.data Size: 280KB - Virtual size: 279KB

.rsrc Size: 7KB - Virtual size: 6KB

.text
Size: 129KB - Virtual size: 129KB

.rdata
Size: 8KB - Virtual size: 32KB

.data
Size: 280KB - Virtual size: 279KB

.rsrc
Size: 7KB - Virtual size: 6KB