52a4cf7f2701fcb9efaee0073c62efb5882da0e479ad1324ea1b82cfa646236c

Sharing

Copy URL Twitter E-mail

General

Target

52a4cf7f2701fcb9efaee0073c62efb5882da0e479ad1324ea1b82cfa646236c
Size

14.7MB
MD5

0789bd4fa5b8757d2556d2dc26974a2c
SHA1

aec8de38271ba304e9080c2c678c9038ba6359d8
SHA256

52a4cf7f2701fcb9efaee0073c62efb5882da0e479ad1324ea1b82cfa646236c
SHA512

1961be88f90cd314fd90e33f8743828c34cc5e2b3469e69a232438cec30b1317f6dd7ae492f0f2d96f58c9dba7dd7776e97975a3b904889c20ec808e98e29c53
SSDEEP

393216:TIZ3cJbgFj9Lk1+gQjNXpWGqBzLylFNPcGTLwK:My2kdA+VqFfvw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52a4cf7f2701fcb9efaee0073c62efb5882da0e479ad1324ea1b82cfa646236c

Files

52a4cf7f2701fcb9efaee0073c62efb5882da0e479ad1324ea1b82cfa646236c
.exe windows:6 windows x64 arch:x64

c3ed9c1580ff79c64565fa2b9f6bdc11

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

SetClipboardData

shell32

SHGetSpecialFolderPathA

ole32

CoUninitialize

d3d11

D3D11CreateDeviceAndSwapChain

wininet

InternetOpenA

imm32

ImmSetCandidateWindow

d3dcompiler_47

D3DCompile

version

GetFileVersionInfoW

Sections

.text
Size: - Virtual size: 831KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 805KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 782KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fptable
Size: - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.E%_
Size: - Virtual size: 8.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.M(i
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.*n$
Size: 14.6MB - Virtual size: 14.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c3ed9c1580ff79c64565fa2b9f6bdc11

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

ole32

d3d11

wininet

imm32

d3dcompiler_47

version

Sections

.text Size: - Virtual size: 831KB

.rdata Size: - Virtual size: 805KB

.data Size: - Virtual size: 782KB

.pdata Size: - Virtual size: 26KB

.fptable Size: - Virtual size: 256B

.E%_ Size: - Virtual size: 8.2MB

.M(i Size: 3KB - Virtual size: 3KB

.*n$ Size: 14.6MB - Virtual size: 14.6MB

.reloc Size: 512B - Virtual size: 272B

.rsrc Size: 31KB - Virtual size: 30KB

.text
Size: - Virtual size: 831KB

.rdata
Size: - Virtual size: 805KB

.data
Size: - Virtual size: 782KB

.pdata
Size: - Virtual size: 26KB

.fptable
Size: - Virtual size: 256B

.E%_
Size: - Virtual size: 8.2MB

.M(i
Size: 3KB - Virtual size: 3KB

.*n$
Size: 14.6MB - Virtual size: 14.6MB

.reloc
Size: 512B - Virtual size: 272B

.rsrc
Size: 31KB - Virtual size: 30KB