scan
Behavioral task
behavioral1
Sample
052fb2028e40d2e4056d921049364485.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
052fb2028e40d2e4056d921049364485.exe
Resource
win10v2004-20231222-en
General
-
Target
052fb2028e40d2e4056d921049364485
-
Size
15KB
-
MD5
052fb2028e40d2e4056d921049364485
-
SHA1
fd2e689ff85668600ad3e45773761197399571da
-
SHA256
27ae19e6e853c38060ea52040d037dd1697d98cebf4ceac430fc733ccdd51302
-
SHA512
a1e17050cd13fc109d12d13a3ac0f55d967ad5f89977053e6e04b5caff33f9aa3f6fb789cac4a2819184866a13c523d5041b521dba6235c687edce8cc11a74f3
-
SSDEEP
384:TflGaSOzx3iB++wEUloTfZgIZFc/8j1WT5wj6lwW7:Dld3iB+72ZgIk/IQVl97
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 052fb2028e40d2e4056d921049364485
Files
-
052fb2028e40d2e4056d921049364485.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE