Static task
static1
Behavioral task
behavioral1
Sample
052c56ace63ecc3f7812b7d22822d380N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
052c56ace63ecc3f7812b7d22822d380N.exe
Resource
win10v2004-20240802-en
General
-
Target
052c56ace63ecc3f7812b7d22822d380N
-
Size
297KB
-
MD5
052c56ace63ecc3f7812b7d22822d380
-
SHA1
b79f7f5f59126976c345aa6f04f270af9796d62e
-
SHA256
2c3f10d3f0dbce78d44c7543ce4e7433de1ef24f509662087f5e81ff25086910
-
SHA512
bc8ba9764faa9b1c2c2f1fcf3f5837d232153674b099ef4e5265581f17df3d242930afd762ef82478102c952793e50da212d1ba1d85f536711ab81de04abe048
-
SSDEEP
384:buw3klnwaOnuTtXFJtPJnhItatnNra7sssssssssssssssssssssssssssssssst:6vTOnEQmNk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 052c56ace63ecc3f7812b7d22822d380N
Files
-
052c56ace63ecc3f7812b7d22822d380N.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 28.2MB - Virtual size: 28.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ