Static task
static1
Behavioral task
behavioral1
Sample
52181eb986986b0e310fa145e8115ab5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
52181eb986986b0e310fa145e8115ab5.exe
Resource
win10v2004-20231222-en
General
-
Target
52181eb986986b0e310fa145e8115ab5
-
Size
112KB
-
MD5
52181eb986986b0e310fa145e8115ab5
-
SHA1
b830bcd6c355b4e30102dc2aa49ff105b39f43ec
-
SHA256
17c736bf269b34aa90442d6d96e275b3355f9df258d9cae8919d3774a0b01058
-
SHA512
c645bb7020113cdc5025688189f34cef50e5bbbd1a338d0e41fe745f111c6f2934a4ef392e25709924a31560dd54096f4c764130442621309cf5755b563bd3c1
-
SSDEEP
3072:10SpU+WA6ditt8pL0qD93/QphTLYA/5eVic6:FUBA6dKypfD943HFu8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52181eb986986b0e310fa145e8115ab5
Files
-
52181eb986986b0e310fa145e8115ab5.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 111KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE