52da6917541670bd87fbc1a3abae6608[.]exe | Triage

Sharing

General

Target

52da6917541670bd87fbc1a3abae6608.exe
Size

7.2MB
MD5

52da6917541670bd87fbc1a3abae6608
SHA1

bfb50f08e7608ab43f05cf254d172c5f7a6930eb
SHA256

00192ef907c2c676d060dad92dc2244974c35195ec67a55620b44dbbc2db8fd9
SHA512

c4be14002ffe2681808c502e1f61ef188c610908f6b64d12d49ecb7ceb6d6caefe36f59e976989d032a6ab62796486372489886ae2bedee07ff15a93ab7a164b
SSDEEP

98304:gaaPnBAUZLeoYJQFObTNRzmBaT1+WtBcda7nzo7Vd8qQQP7:taPnVyfJzXtBcda7nzo7Vd8qQQj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52da6917541670bd87fbc1a3abae6608.exe

Files

52da6917541670bd87fbc1a3abae6608.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 244KB - Virtual size: 243KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14.2MB - Virtual size: 14.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fptable
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ