c52d74ec6fcc56e4abff9b9f8643d820 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c52d74ec6fcc56e4abff9b9f8643d820
Size

71KB
MD5

c52d74ec6fcc56e4abff9b9f8643d820
SHA1

6f7e36225c48a905e5dcd0a0c5ab0853dfe05dc9
SHA256

adc44975d7eeb798f6eddc370b7b5bbe8d8ba70babe418242a04dfb181c5b0fe
SHA512

c785c29e696b8c814bd668c8437e33e40e04a638b76bdd6a1b4bbedaa45f2d4095223c2a361b63e8062fdfd79ea4955ab56adb647b08499b604cb7ea36e771ae
SSDEEP

1536:CqWkM+Tl9Z1Ovs5RLkkjbg7IdmjviXSZ8P1/3Qh8UMCVNPC11m:GkXZ1OIhkKUmmjaXSCP1fQ2Ul

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c52d74ec6fcc56e4abff9b9f8643d820

Files

c52d74ec6fcc56e4abff9b9f8643d820
.exe windows:4 windows x86 arch:x86

9a8c85fb900bd245a92693fae5d41280

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
GetSystemTimeAsFileTime
CloseHandle
SetFileApisToOEM
GlobalGetAtomNameA
CreateDirectoryW
DeleteTimerQueueEx
BuildCommDCBA
DisableThreadLibraryCalls
PeekConsoleInputW
lstrlenW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE