Static task
static1
Behavioral task
behavioral1
Sample
52c2b8e971914268faf9c3862eee6d39.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
52c2b8e971914268faf9c3862eee6d39.exe
Resource
win10v2004-20231215-en
General
-
Target
52c2b8e971914268faf9c3862eee6d39
-
Size
64KB
-
MD5
52c2b8e971914268faf9c3862eee6d39
-
SHA1
98774b0c1447e872b9a001369d73da019359beb5
-
SHA256
bdc7dd4194ca4003fd071f1f68006765410cc37c2231f7f0b428d0adf45db0af
-
SHA512
b30b02f088566a39317e0a6b9f77666ad7577d2fa8d9f045eef2de0321dd9c972861c8c22d6a303b9f6487de6a98c69b33f680d7708ca21c7ee4d8e53847bf98
-
SSDEEP
1536:izsqDDm0TljazdJaQyXMvC9Uy5tNun+D2yCUoCxtbH8FN:puZ9AmQyXMYlpu+iytbHMN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52c2b8e971914268faf9c3862eee6d39
Files
-
52c2b8e971914268faf9c3862eee6d39.exe windows:4 windows x86 arch:x86
1eda768b5b55c31f3673ee8e1628762f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetWaitableTimer
FindNextFileW
FindResourceW
CancelWaitableTimer
GlobalAlloc
GlobalLock
GetCurrentThread
SetThreadPriority
WaitForSingleObject
CreateThread
GetLogicalDrives
GlobalFree
FindFirstChangeNotificationW
GetSystemTime
VirtualFree
SetFilePointer
GlobalUnlock
ResetEvent
DuplicateHandle
SizeofResource
WideCharToMultiByte
MulDiv
LoadLibraryA
FindResourceExW
GetProcAddress
GetModuleFileNameW
VirtualAlloc
SetLastError
user32
TranslateMessage
GetDlgItem
LoadBitmapW
SetCursorPos
IsDlgButtonChecked
UpdateWindow
ReleaseCapture
IsWindow
SetWindowPos
LoadStringW
FillRect
SetForegroundWindow
AppendMenuW
SetCapture
LoadImageW
RegisterWindowMessageW
gdi32
GetClipBox
SetTextColor
CreateDCW
SetMapMode
CreateSolidBrush
GetStockObject
CreateICW
SetBkColor
advapi32
SetSecurityDescriptorDacl
RegCreateKeyExW
LookupAccountSidW
InitializeSecurityDescriptor
RegSetValueExW
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE