52cbe65053cb32522f4da82fd1d94df0201ab9a4fe11998a19b58ef1f09f13de | Triage

Sharing

General

Target

52cbe65053cb32522f4da82fd1d94df0201ab9a4fe11998a19b58ef1f09f13de
Size

568KB
MD5

42da88f4f51f0e18912f161025d91406
SHA1

e11f2fcb9c97933fb9fff2ec32d9b7acf695920c
SHA256

52cbe65053cb32522f4da82fd1d94df0201ab9a4fe11998a19b58ef1f09f13de
SHA512

f52e9e4b4085b1990e14b0a20a6270c24532c6ac0567fb598cdbf80ef4ee36ecab2d4f728844ba86231819b7db546dd07799a79715807323a3c07131990a54af
SSDEEP

12288:QU4daTDD2uBKXQJC4EzpWm5jGMw8RgFRZdfknn:Q0+ugAU4ENWmpGiRgFJf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

unpack002/Documents.exe

Files

52cbe65053cb32522f4da82fd1d94df0201ab9a4fe11998a19b58ef1f09f13de
.iso
out.iso
.iso
Documents.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 514KB - Virtual size: 514KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ