Static task
static1
Behavioral task
behavioral1
Sample
50476ade5570f3053406cc69cb75e57ac47aa4627b3b7eb315db8f90522a7dc4.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
50476ade5570f3053406cc69cb75e57ac47aa4627b3b7eb315db8f90522a7dc4.exe
Resource
win10v2004-20230220-en
General
-
Target
50476ade5570f3053406cc69cb75e57ac47aa4627b3b7eb315db8f90522a7dc4
-
Size
1.4MB
-
MD5
94c5d52b897fb392c9df822e145e9795
-
SHA1
42ceda20b72f601d76a0c36ac15dddd8aa4afd8c
-
SHA256
50476ade5570f3053406cc69cb75e57ac47aa4627b3b7eb315db8f90522a7dc4
-
SHA512
abf575bb2dcd43a090e20653bfd64db87c7ab6879cd7a0bb1d38188044fe9ac94cb3ae4fe9fa8e30225e0fe8a738fd7b2b6e104f5c3594848ed5aa31f3287da6
-
SSDEEP
24576:JfOkf02ODIJKRwUYqtJ8cQ3u4fUUjaOPohoR2XzHLGzY:JmU2bRrTtJVrX0ohoR2G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50476ade5570f3053406cc69cb75e57ac47aa4627b3b7eb315db8f90522a7dc4
Files
-
50476ade5570f3053406cc69cb75e57ac47aa4627b3b7eb315db8f90522a7dc4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dswlab Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE