Behavioral task
behavioral1
Sample
52fe008cd829fad4858b15d781183257.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
52fe008cd829fad4858b15d781183257.exe
Resource
win10v2004-20231215-en
General
-
Target
52fe008cd829fad4858b15d781183257
-
Size
363KB
-
MD5
52fe008cd829fad4858b15d781183257
-
SHA1
996663f2d092b09fc71c5caea7df83bb093f2aa1
-
SHA256
0226227443a71c96bc38ac0372b4353375b090c2beb2fb1287b1318c4e7f53a4
-
SHA512
2136fd74e3dc0da7eaee18fc5957cf756c9cbfe8364778ff9a859f5a1f5b04ccbdd5626938ab792f14e691a54e0cb9b143f310bb5c17bef7f32cf73c861ad429
-
SSDEEP
6144:hGEtAwaiR0OxLiYtIBdI/r95wxesx7+F6O3ddH43lIEMnvQSj4idVuzu975qxNqD:hLVdeOxLBIsp5wR7wtFomEESzu9tq/Sl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52fe008cd829fad4858b15d781183257
Files
-
52fe008cd829fad4858b15d781183257.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE