Static task
static1
Behavioral task
behavioral1
Sample
52c571bfd24eeb8bd339ecf03afb585e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
52c571bfd24eeb8bd339ecf03afb585e.exe
Resource
win10v2004-20231222-en
General
-
Target
52c571bfd24eeb8bd339ecf03afb585e
-
Size
988KB
-
MD5
52c571bfd24eeb8bd339ecf03afb585e
-
SHA1
dc70b9c8245f919d3259e43ed8da93e62fe40c8d
-
SHA256
71a197f02cde01a3105dd6417d278169a8016d596ee321c1cbb9c5c68cc1c49c
-
SHA512
9e2410aab52e3019d0fb1f7a1ca8b1783fd539f2935abdcb969de464017b827b1404e5cbcbc8067e7ed279077bff02392d77775b38e7dbc9f413d57826859685
-
SSDEEP
24576:d6zrU1/jML3btv/wRmSIN3O1SLIQqdW53P1QNtFFS6kqf1RrzeM7E+7z:heL3Zv/q03O253POhFS6k41zecE+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52c571bfd24eeb8bd339ecf03afb585e
Files
-
52c571bfd24eeb8bd339ecf03afb585e.exe windows:4 windows x86 arch:x86
67fdc237b514ec9fab9c4500917eb60f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
VirtualAlloc
Sections
Size: 227KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 226KB - Virtual size: 241KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 680KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sufsntnm Size: 505KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
puktargy Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE