Static task
static1
Behavioral task
behavioral1
Sample
52d914c8fa26ae793b012c68291719f9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
52d914c8fa26ae793b012c68291719f9.exe
Resource
win10v2004-20231222-en
General
-
Target
52d914c8fa26ae793b012c68291719f9
-
Size
164KB
-
MD5
52d914c8fa26ae793b012c68291719f9
-
SHA1
71974b58f8de726790b3eadea931a73bf7bad1cd
-
SHA256
b77333164092b48615c8826ac7694f47819f070f6cc793d62363844a8c49c20f
-
SHA512
9ac6801fce8f8b49e15302932dd0198c8c0bf0e5ce7f48899081420ad774781d66d10d341e1c845252179b0caad0568a16f7b83fe109a5165976a2e95d70342e
-
SSDEEP
3072:pDXmlrNFQkjQbdu4ntbVaa3u1iMKHGZ/I4f4m2w2HDV2+FTmdTJNr3e9ms+I:lmJNFQU4ntZaxMMGGZ/IOX2H5pU5bSf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52d914c8fa26ae793b012c68291719f9
Files
-
52d914c8fa26ae793b012c68291719f9.exe windows:4 windows x86 arch:x86
93361f8c6c57c9899e28c079929db992
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GetModuleHandleA
FlushInstructionCache
VirtualProtect
GetTickCount
GetLastError
GetProcAddress
LoadLibraryA
Sleep
LocalFree
LocalAlloc
user32
wsprintfA
Sections
8X1M@<:E Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
HEMg(sl& Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
jP wAAN: Size: 4KB - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CrJSI?>x Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ