Static task
static1
Behavioral task
behavioral1
Sample
52ea73f2c9ac8d80a2a5dac345456da48e1ecdc1af36f7c81c9910b42aedd487.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
52ea73f2c9ac8d80a2a5dac345456da48e1ecdc1af36f7c81c9910b42aedd487.exe
Resource
win10v2004-20240426-en
General
-
Target
52ea73f2c9ac8d80a2a5dac345456da48e1ecdc1af36f7c81c9910b42aedd487.exe
-
Size
176KB
-
MD5
a34499658a354bd1dccfb838dea3eeac
-
SHA1
8d6adb1ec1eaa14e5283ef78584977853c6ddf7e
-
SHA256
52ea73f2c9ac8d80a2a5dac345456da48e1ecdc1af36f7c81c9910b42aedd487
-
SHA512
88601f454c9307c6f5dbef6b168398c802e9f6ee16d3e58bf749b35c3844026d8ef1fb47f9b3ec6ab035666f6c4112927ac5579b27b70210c0890b3ec9b3c516
-
SSDEEP
3072:F4KKowXkK7Kbanrfk7iUT6ywmPN3mAIbbESGLSp8c7H0BP+S8adPe26MLfWWAFrS:AXvr6pwmFWACEkpnUBPbdzeHTy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52ea73f2c9ac8d80a2a5dac345456da48e1ecdc1af36f7c81c9910b42aedd487.exe
Files
-
52ea73f2c9ac8d80a2a5dac345456da48e1ecdc1af36f7c81c9910b42aedd487.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ