52bd8ba0551b70c1703cdc69d65bcad44d4e0a490a29b24a7b8af3791b11f0eb | Triage

Sharing

General

Target

52bd8ba0551b70c1703cdc69d65bcad44d4e0a490a29b24a7b8af3791b11f0eb
Size

63KB
MD5

582496cfdf73532095bb65a4ddf14e87
SHA1

04c1e34e5d1c5ee797c90d2b1252e9583ab7aadb
SHA256

52bd8ba0551b70c1703cdc69d65bcad44d4e0a490a29b24a7b8af3791b11f0eb
SHA512

d65241531c2a2e3ab9d6e6e45282c49fa06d76c402d6e822aead7fc4a593e6db99105a5ed5c98182cee5b8ebcc0b6c95c2b9a55568ccbff488a8c0f7962f23a8
SSDEEP

1536:UVCOPI5536aSNLQ9Z+0XYlByMhXJGixFmxJ8vYUHQqx/:YCOQPxSNLQ98jCEVFnvYHs/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52bd8ba0551b70c1703cdc69d65bcad44d4e0a490a29b24a7b8af3791b11f0eb

Files

52bd8ba0551b70c1703cdc69d65bcad44d4e0a490a29b24a7b8af3791b11f0eb
.exe windows:4 windows x86 arch:x86

6ae71706daf235d372683a521ec611a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeExW
BaseCheckAppcompatCacheExWorker
DebugActiveProcess
UnmapViewOfFileEx
GetProcessHandleCount
MoveFileW
RegisterConsoleVDM
GetMemoryErrorHandlingCapabilities
CopyFile2
SetCachedSigningLevel

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE