Static task
static1
Behavioral task
behavioral1
Sample
52af20ab824dee8904b581bc66dd1a70.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
52af20ab824dee8904b581bc66dd1a70.exe
Resource
win10v2004-20231215-en
General
-
Target
52af20ab824dee8904b581bc66dd1a70
-
Size
18KB
-
MD5
52af20ab824dee8904b581bc66dd1a70
-
SHA1
6e4fa90977d4ba46bbbd3e001513d95aa6336157
-
SHA256
6d0ffb4dfce7521eca1f2957413f6e104cf6eab94f6ba89e90dc7e49385744a7
-
SHA512
7d27efeb894518cf6818861064151d6a13c8f4b8ce79bfec62cd9084fe4e8c862afc59af554f22ee07592ec10640867a10cb7c411fb7184052a57472d5e82699
-
SSDEEP
384:CQcy+92xaSLRp7UTw6AlT+WymHDGHYlFNVnG662v:CQcydxaSH7UTyiWyVIn62v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52af20ab824dee8904b581bc66dd1a70
Files
-
52af20ab824dee8904b581bc66dd1a70.exe windows:4 windows x86 arch:x86
efcdeeeb80a901240f5805369b074a70
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
GetCommandLineA
TlsAlloc
GetModuleFileNameA
TlsGetValue
GetCurrentProcess
GetACP
TlsFree
IsDBCSLeadByte
FreeLibrary
lstrcmpA
Sleep
GetModuleHandleW
GetCurrentProcessId
TlsSetValue
VirtualAlloc
GetDriveTypeW
GetCurrentThread
GetCurrentThreadId
GetLogicalDrives
GetSystemDefaultLangID
user32
GetForegroundWindow
GetWindowTextA
GetDC
IsIconic
GetWindow
GetActiveWindow
ReleaseDC
GetWindowDC
UpdateWindow
GetSystemMetrics
RegisterClassA
CreateWindowExA
GetFocus
BeginPaint
ShowWindow
GetWindowTextLengthA
IsWindowVisible
GetClassLongA
GetWindowLongA
advapi32
RegQueryValueExA
IsTextUnicode
RegOpenKeyExA
GetUserNameA
RegCloseKey
RegCreateKeyExA
apphelp
ApphelpCheckIME
GetPermLayers
AllowPermLayer
ApphelpShowDialog
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ