52b81cdcd802b24adf75dd17dd331a74b81ebd954c4aebdc0ec56952c90a553e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52b81cdcd802b24adf75dd17dd331a74b81ebd954c4aebdc0ec56952c90a553e
Size

20KB
MD5

4e1589966814a05636aa78ec90831b44
SHA1

78541e7b845ad3796a3ceab28821fb29e70179ff
SHA256

52b81cdcd802b24adf75dd17dd331a74b81ebd954c4aebdc0ec56952c90a553e
SHA512

fcac5cda4a382a8f934d4b1dbf624a2938c31a0a2c2c0ba511f13d35a105854873903ced7fa4009c464a1b64e3a920f1ce97abbacf317a8870ec97de4857e871
SSDEEP

384:NN7qjoB0hbHaX4Y84lAyWF24coHefu8kxO8DA:NN7qjohkA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52b81cdcd802b24adf75dd17dd331a74b81ebd954c4aebdc0ec56952c90a553e

Files

52b81cdcd802b24adf75dd17dd331a74b81ebd954c4aebdc0ec56952c90a553e
.exe windows:6 windows x64 arch:x64

2f3c525a4182b9ac49c8bbf922da9baa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

storeexperiencehost

RHBinder__ShimExeMain

Sections

.rdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ