Static task
static1
Behavioral task
behavioral1
Sample
52bd6d565c2f357d8154e5ff716adf7d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
52bd6d565c2f357d8154e5ff716adf7d.exe
Resource
win10v2004-20231215-en
General
-
Target
52bd6d565c2f357d8154e5ff716adf7d
-
Size
82KB
-
MD5
52bd6d565c2f357d8154e5ff716adf7d
-
SHA1
11cce1db6cb67b61ca529b9c5f74a14f0a340f84
-
SHA256
37e919b158bac2e1598a01e4ae5e8fdee506de998d2603bd79f605f766fafd3f
-
SHA512
e2b382185e6040a18badc80556ed06199e4eb28720e86f69f55bc3125ddceee61832906118f292f1d3272ea9716b6a947bb13767833de6c36161800ce9c55ec7
-
SSDEEP
1536:2Z/nEkh8OTKNSGH2R6HJSpuSSLF+kqsaeyFUqcPoG3nNx:4xhTKNSO2KOSLgk5yGqO3Nx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52bd6d565c2f357d8154e5ff716adf7d
Files
-
52bd6d565c2f357d8154e5ff716adf7d.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ