Static task
static1
Behavioral task
behavioral1
Sample
52e39c03d64384fdb2bb923e2ff4925e.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
52e39c03d64384fdb2bb923e2ff4925e.exe
Resource
win10v2004-20231215-en
General
-
Target
52e39c03d64384fdb2bb923e2ff4925e
-
Size
1.6MB
-
MD5
52e39c03d64384fdb2bb923e2ff4925e
-
SHA1
ecbecc86fff32a26fc22c6d9d736e4aceb17bea8
-
SHA256
afe7af9cbe7ab7a285ddb542d38685b47c0fed7be0c4a1cfebfbf8a6f4d433f3
-
SHA512
85370333dc68c8b77fc0d8617c0c813b20eba41a8c71185d2c6b1b82ca946cf7d431f1123bff07455fc25b72fd3af0b02e4aac894f8a2eb58bb3baa34a256b4e
-
SSDEEP
24576:TF3tm7s7o8StzDaewsAj9tUcazumXRLssVf1kAss86TYA:3SSoxz2ljU9VfWAss1TJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52e39c03d64384fdb2bb923e2ff4925e
Files
-
52e39c03d64384fdb2bb923e2ff4925e.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 133KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c2r Size: 512B - Virtual size: 280B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ