Behavioral task
behavioral1
Sample
52f4e0a41da8dd82dc2625b8e5077998412bb53d0f92938cb56fa951f388ea97.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
52f4e0a41da8dd82dc2625b8e5077998412bb53d0f92938cb56fa951f388ea97.exe
Resource
win10v2004-20220901-en
General
-
Target
52f4e0a41da8dd82dc2625b8e5077998412bb53d0f92938cb56fa951f388ea97
-
Size
348KB
-
MD5
0cc1a21db40396f45370b74a23087254
-
SHA1
789848a6945ad01a8d018c34fcb7ff40fb24deb3
-
SHA256
52f4e0a41da8dd82dc2625b8e5077998412bb53d0f92938cb56fa951f388ea97
-
SHA512
a599ee2eeec7b9d24a253e56ef881f915b67a25483f85c2d49b8e5476b1bdaac9427f68a34cd84cf3af3f15e8d6e4d1c488cfebe957628b7846087a8254b95f6
-
SSDEEP
6144:XeMm7XPA1zeyEvfwR9aCz1yUZHSUi+M7eJB3FQJpJMikl25ioS:KbPI2H69Xz1yqyMYeJB3FQJpJok5ioS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
52f4e0a41da8dd82dc2625b8e5077998412bb53d0f92938cb56fa951f388ea97.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 344KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE