Static task
static1
Behavioral task
behavioral1
Sample
52de774870c7ada6eed786f6d24840d1a59f7665d5b90c5029522ca35243623cN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
52de774870c7ada6eed786f6d24840d1a59f7665d5b90c5029522ca35243623cN.exe
Resource
win10v2004-20250211-en
General
-
Target
52de774870c7ada6eed786f6d24840d1a59f7665d5b90c5029522ca35243623cN.exe
-
Size
1.6MB
-
MD5
0e577b56933e1ca5c34d2332a5c60a00
-
SHA1
9a16911a231aa1d88ed89869b4a705c3023225d4
-
SHA256
52de774870c7ada6eed786f6d24840d1a59f7665d5b90c5029522ca35243623c
-
SHA512
15b4f4910a90678c52b0790fe0a47017240dc70764c060e99a842b16b0f0230267467b0380a9ddf039de78e2c7b95db8d9d88ba67ac736975850ab00ebea6d81
-
SSDEEP
24576:EeuPfbQTsLQvDFzqllx+/IAFAeuoRq6DJ/CoT+scEcz4OBl0p/EJUhe7DdwIHXZI:DtOgdquInmfdCqjcG00pces7DfHX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52de774870c7ada6eed786f6d24840d1a59f7665d5b90c5029522ca35243623cN.exe
Files
-
52de774870c7ada6eed786f6d24840d1a59f7665d5b90c5029522ca35243623cN.exe.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 6KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
egkuyali Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zfjjtrkl Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE