52ab639f3e2525a0180fe6e2dcdccddf144e7fb61c861e146a62eb9956957a07 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52ab639f3e2525a0180fe6e2dcdccddf144e7fb61c861e146a62eb9956957a07
Size

5.0MB
MD5

f14d676b3b4a907a80b138398b02a2f0
SHA1

41c02366485d71ae76194db919cd5cd139f371dd
SHA256

52ab639f3e2525a0180fe6e2dcdccddf144e7fb61c861e146a62eb9956957a07
SHA512

93840997f1c2d7f0e7bcae25b249fc64c6c4fa9b4e6d5397df7e99cdd6bcd1ae2455e6cd14889111f1c2568dc33bf9f804f769de6b8ee637a01f9a40a81c7142
SSDEEP

98304:kf4EIDDHK9nhCbJzEaokXvLZw8jzcO/7KNQS8r7NL5j5tDo3STwK7zUFBVEWTx4x:Q4HKDQBKkXy+XWt815j5tDobSUFQFpL7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52ab639f3e2525a0180fe6e2dcdccddf144e7fb61c861e146a62eb9956957a07

Files

52ab639f3e2525a0180fe6e2dcdccddf144e7fb61c861e146a62eb9956957a07
.exe windows:5 windows x86 arch:x86

f427ec01d51b9c584dcb332a494f35bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueW

mpr

WNetGetConnectionA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

shell32

ShellExecuteA

comdlg32

GetOpenFileNameA

wsock32

WSACleanup

gdiplus

GdipSetStringFormatLineAlign

Sections

.text
Size: 3.9MB - Virtual size: 8.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE