Static task
static1
Behavioral task
behavioral1
Sample
52b0efeb3107554aab5e22719577e312e32deb299518afac10a73ba9bb6cad48.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
52b0efeb3107554aab5e22719577e312e32deb299518afac10a73ba9bb6cad48.exe
Resource
win10v2004-20231025-en
General
-
Target
52b0efeb3107554aab5e22719577e312e32deb299518afac10a73ba9bb6cad48
-
Size
3.1MB
-
MD5
e34d868e84a35693ecd622b04fa89122
-
SHA1
608531d68adbce0f059255e973e405de5ea56dcc
-
SHA256
52b0efeb3107554aab5e22719577e312e32deb299518afac10a73ba9bb6cad48
-
SHA512
5c566a999022a19eb5d8bd2449d238fcc2f5b0421d6a2ada9a01562d35bba4ae3d6befd5f36685899e2ab47ffd866455641ced9519ec426fba312bbc4a083110
-
SSDEEP
98304:UzXSmcegvt6TpD5bcp9jPYnS23DMHl6MtgLe1zF:U746TbWliDSrtgC1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52b0efeb3107554aab5e22719577e312e32deb299518afac10a73ba9bb6cad48
Files
-
52b0efeb3107554aab5e22719577e312e32deb299518afac10a73ba9bb6cad48.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 287KB - Virtual size: 776KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2.8MB - Virtual size: 21.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 26KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE