Behavioral task
behavioral1
Sample
52c10c11a1178ae71b8f985367a3c88a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
52c10c11a1178ae71b8f985367a3c88a.exe
Resource
win10v2004-20231215-en
General
-
Target
52c10c11a1178ae71b8f985367a3c88a
-
Size
312KB
-
MD5
52c10c11a1178ae71b8f985367a3c88a
-
SHA1
93941aded9de700b36ab2da47003ea0c849f4edf
-
SHA256
b05bd08e004af493b2739a4bf8ae60338762134eccd7b5a0426a1d99accd4587
-
SHA512
b9176cd633fcabee209cccb8d53c6c36ea974e6503912fbf0bea0463360dd9e085483f7ec0dfc0167d7da3a43f11144a6033173152e8b6de4471d67d2f08ac2c
-
SSDEEP
6144:L3a1zogAOcAWYdu1iKWuCw8+KblzIU27bdaaYRznyb50:+9SANdu158+KGUCg/v
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52c10c11a1178ae71b8f985367a3c88a
Files
-
52c10c11a1178ae71b8f985367a3c88a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 460KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 304KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE