Behavioral task
behavioral1
Sample
b52d35f2aa47e186d75cd63a94513af2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b52d35f2aa47e186d75cd63a94513af2.exe
Resource
win10v2004-20240226-en
General
-
Target
b52d35f2aa47e186d75cd63a94513af2
-
Size
6.5MB
-
MD5
b52d35f2aa47e186d75cd63a94513af2
-
SHA1
b8ff058740cec0e46604bfffdf087deb31ab1852
-
SHA256
8b1b9d42163dd51df5cb68cbba9d2b079dc652f1be3b74e341731c5f7d581036
-
SHA512
80aa59aef28bd66a9de99f85be9aa6432687d5d713757f3971d6b224aba2a4cd76b3a9abb63456da780a022acce7d8ed0b3a68d7d7ec1eb89ed82bd22597f825
-
SSDEEP
196608:Go+gp1DM9onJ5hrZER9xQ3jo4UR7+sIceyI:FpNM9c5hlER9xA2RSsI
Malware Config
Signatures
-
resource yara_rule sample upx -
Detects Pyinstaller 1 IoCs
resource yara_rule sample pyinstaller -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b52d35f2aa47e186d75cd63a94513af2
Files
-
b52d35f2aa47e186d75cd63a94513af2.exe windows:5 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 156KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
1_cs_attack.pyc