Behavioral task
behavioral1
Sample
52a80d1552bf3e5b705ce304e9176c74.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
52a80d1552bf3e5b705ce304e9176c74.exe
Resource
win10v2004-20231215-en
General
-
Target
52a80d1552bf3e5b705ce304e9176c74
-
Size
150KB
-
MD5
52a80d1552bf3e5b705ce304e9176c74
-
SHA1
5adbc1a10c9580b81c52dc333d5e86ec25d3d6b3
-
SHA256
60c8d3f1b9a83df2c819f70f0c2314e3656e98d63287f9dd46691e85329427e6
-
SHA512
5cbbfbdf135163050f26e54ca4f7d6723836c6294273442b4c1b18876c3227220a099d117afc8f6829d94d1d092d68a5a492241340e5c5bb7c5ed5172e4944e7
-
SSDEEP
3072:oOOuCzoSHkoglKy0EDP4DbH+N6V7Acp3b1gKLAnQLI9kcIEe13t5Ljuv3:oOOLzjHkvx0FDTfVccl1wneb19JG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52a80d1552bf3e5b705ce304e9176c74
Files
-
52a80d1552bf3e5b705ce304e9176c74.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 252KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 145KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE