Static task
static1
Behavioral task
behavioral1
Sample
52e177913393672fd0bcc8c6de313912.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
52e177913393672fd0bcc8c6de313912.exe
Resource
win10v2004-20231215-en
General
-
Target
52e177913393672fd0bcc8c6de313912
-
Size
14.1MB
-
MD5
52e177913393672fd0bcc8c6de313912
-
SHA1
db8594f9b75930569cba6e56aa86d89d16f9d47b
-
SHA256
c72faf36260909bd74abb64b85027eb32144d8ceabf99c4b623387aef8ba0254
-
SHA512
708319abd330f23f2333b4ee982f171c6d6b12a17f3f324be5306acedc9de54abc9062d12110feba1f123bdabead1f75dce98f9989b6f9910e06a0e8dbf4d09a
-
SSDEEP
393216:78dxc3x1wa7QYpfemvdorsiZ4emvdorsi:78dG3bwaEoemlksiZ4emlksi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52e177913393672fd0bcc8c6de313912
Files
-
52e177913393672fd0bcc8c6de313912.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 14.1MB - Virtual size: 14.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ