W52UE52XBY31[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
W52UE52XBY31.exe
Size 2.0MB
Sample261102-b88feagw6k
SHA256 8daf63d256788702648f1699d1909d7a862bb9859ca93bbf96fd73f70bc107a9
MD5 8b8437eab9e8d2db15976fd895a07d7c
SHA1 46d76968389c0fb8482cfde6603c2dcdbae85634
SHA512 e9a09bcaabf70809ca43a81d6d163bc7fde04fe8b1e3beb5f798f2a0e5ce67fe97b19d7f9bf043c4b3a42b7b49afdc61239a4fc008478df9259a2af96293c62f
SSDEEP 49152:8JShofikO5GAmXawUl8qM5+/keT0U9oKr0G0eDD/:8JShVkahmXaN875+voU9XO2D/
TLSH
T13FA52362731428F1FC86C87882559636BB3B70972FA555FB63A511A12F34FE01F78A23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
W52UE52XBY31.exe

File Explorer

W52UE52XBY31.exe

.exe 2.0MB

W52UE52XBY31.exe

IMPHASH 47727555ff6fee55bad9bac6b93ec1ff
SHA256 8daf63d256788702648f1699d1909d7a862bb9859ca93bbf96fd73f70bc107a9
MD5 8b8437eab9e8d2db15976fd895a07d7c
SHA1 46d76968389c0fb8482cfde6603c2dcdbae85634
SHA512 e9a09bcaabf70809ca43a81d6d163bc7fde04fe8b1e3beb5f798f2a0e5ce67fe97b19d7f9bf043c4b3a42b7b49afdc61239a4fc008478df9259a2af96293c62f
SSDEEP 49152:8JShofikO5GAmXawUl8qM5+/keT0U9oKr0G0eDD/:8JShVkahmXaN875+voU9XO2D/
TLSH
T13FA52362731428F1FC86C87882559636BB3B70972FA555FB63A511A12F34FE01F78A23
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

91504

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

kernel32

SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetProcessHeap HeapFree HeapReAlloc GetCurrentThreadId GetLastError SetLastError GetEnvironmentVariableW GetCurrentDirectoryW RtlCaptureContext GetCurrentProcess RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA GetProcAddress lstrlenW GetCurrentProcessId CreateMutexA CloseHandle ReleaseMutex WideCharToMultiByte RtlVirtualUnwind GetModuleHandleW FormatMessageW GetStdHandle GetConsoleMode GetConsoleOutputCP WaitForSingleObject MultiByteToWideChar WriteConsoleW HeapAlloc GetModuleHandleA ExitProcess QueryPerformanceCounter

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

__current_exception_context __current_exception memcpy memset __CxxFrameHandler3 memmove memcmp __C_specific_handler

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

exit _exit _seh_filter_exe __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _initterm_e _initterm _get_initial_narrow_environment _initialize_onexit_table _register_onexit_function _crt_atexit terminate _set_app_type _initialize_narrow_environment _configure_narrow_argv

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode