Static task
static1
Behavioral task
behavioral1
Sample
52d92e502bd1353b2bcc2c4fff153d31d789c679c0fe92949ff522eff518a4ea.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
52d92e502bd1353b2bcc2c4fff153d31d789c679c0fe92949ff522eff518a4ea.exe
Resource
win10v2004-20240709-en
General
-
Target
52d92e502bd1353b2bcc2c4fff153d31d789c679c0fe92949ff522eff518a4ea
-
Size
300KB
-
MD5
1088c5c912b70a419dcfa37c22851ad1
-
SHA1
5288b43c6503d13f83cc0fd5ba7c309a43fbabd1
-
SHA256
52d92e502bd1353b2bcc2c4fff153d31d789c679c0fe92949ff522eff518a4ea
-
SHA512
5718b244e83977aa4c1c0f8f996ac7693950f45acb4b3f1bea6ccfc766d1b6bcbfaf9f835b5132a2dd4427ca734e99bfe74242bc0bc4ede6917eb9a3f73d97f9
-
SSDEEP
6144:UTigNItBg7/OlEf6zLOF6G/htyn6S+q0YdQwiHJgCUFb8R8QpO6XZLTm7ZvhJS89:gQdQwiHJgCUIzpOKZLTm7ZZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52d92e502bd1353b2bcc2c4fff153d31d789c679c0fe92949ff522eff518a4ea
Files
-
52d92e502bd1353b2bcc2c4fff153d31d789c679c0fe92949ff522eff518a4ea.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 266KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ