Static task
static1
Behavioral task
behavioral1
Sample
052a2c74816850ec0302beb309de2d98.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
052a2c74816850ec0302beb309de2d98.exe
Resource
win10v2004-20231215-en
General
-
Target
052a2c74816850ec0302beb309de2d98
-
Size
256KB
-
MD5
052a2c74816850ec0302beb309de2d98
-
SHA1
e5dc08f3d4000577383477cc7f641620e5658ba5
-
SHA256
b2b981e3ae5d6e477be21c341fe37a580f51f1b73702edbfbdcde78e75299122
-
SHA512
9c814868d4f3145c54cb27a69a6843b737dd9e9935671ddd75cd0141bcdbe640e97d3d8f3bbdee179fc210b0696998ba9b07d31becec81128a8ed924960d5017
-
SSDEEP
6144:bN3xKUvab/RKgmGyzLF/9m4H/3FAE++qiF7:befbdJY/9FfVbhzF7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 052a2c74816850ec0302beb309de2d98
Files
-
052a2c74816850ec0302beb309de2d98.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 523KB - Virtual size: 524KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 331B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE