52b5aad18e59201d5513de82fc702d10N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52b5aad18e59201d5513de82fc702d10N.exe
Size

33KB
MD5

52b5aad18e59201d5513de82fc702d10
SHA1

b49e9039a156bd2a0ec98a3d0deb136253bed894
SHA256

9fa2f2033e960f90b6571d7293871a92a527a284aa858e1e099865fcce82269a
SHA512

c199370d85aacd9b4863ac1a9a89476442c87eb6c227219d04501cae92bbdd6e49c27202c92e969f11065171c186c7ddf23370878c177252d7202cea46b48854
SSDEEP

384:CV6wM2h3ln/3m0p/Qhlg8dgQBY8hrBpj6480BpLe2MJ0W8xjUNO4ROxC:Q6K7fJKFiQTrLjdTLTW8xwkkOA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52b5aad18e59201d5513de82fc702d10N.exe

Files

52b5aad18e59201d5513de82fc702d10N.exe
.exe windows:4 windows x86 arch:x86

93ef196156d6da1d4462ba7d424ca7b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetClientRect
GetMessageA
EndPaint
ShowWindow
UpdateWindow
DrawTextA
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
MessageBoxA
DefWindowProcA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
PostQuitMessage
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentProcessId
GetCurrentProcess
GetSystemTimeAsFileTime
CreateFileA

gdi32

CreateFontIndirectA
DeleteObject
CreateCompatibleDC
CreateSolidBrush
CreatePen

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bss
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ