52c85a124bce25a3ee7c99ce00fcb7a0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52c85a124bce25a3ee7c99ce00fcb7a0N.exe
Size

5KB
MD5

52c85a124bce25a3ee7c99ce00fcb7a0
SHA1

d395163201e0162c07e725bdcd3a431b78b5f26d
SHA256

f56d2cc577fa4f6db8faeed0610c2d904f9db4fab2f6a17bf32f0ca16e4fb216
SHA512

836aa37cda5e7e005be142510ab7e4366c8f3a04ed01eb7819883eb89a2874d8c4dfb01a558ebf431f9d53cba62f148b20d8bbc472356f1ddeb77da8fb8dbb72
SSDEEP

48:C6VonAHso6U7lYa92RrpjwDmetlG95hx+iMHhYYgv96voP7FQrSNUzXsZ32kragD:nEY2RrF1eqwi45opt48322RwZLTFB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52c85a124bce25a3ee7c99ce00fcb7a0N.exe

Files

52c85a124bce25a3ee7c99ce00fcb7a0N.exe
.dll windows:5 windows x86 arch:x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ