Behavioral task
behavioral1
Sample
52f6944210318731aad3a61b869e24b0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
52f6944210318731aad3a61b869e24b0N.exe
Resource
win10v2004-20240709-en
General
-
Target
52f6944210318731aad3a61b869e24b0N.exe
-
Size
68KB
-
MD5
52f6944210318731aad3a61b869e24b0
-
SHA1
e338d04ba47aca49922efd99921e7d0a0a88fadf
-
SHA256
57a8a5c54c5ca854237b2813057bb7283d984f6ca4508d87ed0a8c7ae90eec2c
-
SHA512
567dfdbe7355d632f32567759711b80d9bb9053a466b80f3f97a6885d6fce5acf292c7186e38e3447adae6bb5ae8ca3ab5c2aa9cd7e329e4a1926febe669f82a
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8+wu:fnyiQSo9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52f6944210318731aad3a61b869e24b0N.exe
Files
-
52f6944210318731aad3a61b869e24b0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE