Static task
static1
Behavioral task
behavioral1
Sample
50a8c24475532a92a2958790c5847023e92523484ba07a54533a0979f4e623b9.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
50a8c24475532a92a2958790c5847023e92523484ba07a54533a0979f4e623b9.exe
Resource
win10v2004-20230703-en
General
-
Target
50a8c24475532a92a2958790c5847023e92523484ba07a54533a0979f4e623b9
-
Size
2.7MB
-
MD5
860f1f65c10513499885a82e0f0831db
-
SHA1
74e1970914c999033aa65a31d41f3f27a444d6c0
-
SHA256
50a8c24475532a92a2958790c5847023e92523484ba07a54533a0979f4e623b9
-
SHA512
4b903336bf6626776fae1661161617368cfa4eeccecc9e3a2761f11de67decc39aaf1d61b749b0ebd6b01a5dfdf9dfe289d114d22cd5646d83f0a1a4ec27dbe5
-
SSDEEP
49152:VUKhfaecVdorzF55vO8z8NgypaGM2zZsIARecYLeUxx0SmR3Ij9D:VdNae6dAP5g1MieIgecYKUxx0SmR32D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50a8c24475532a92a2958790c5847023e92523484ba07a54533a0979f4e623b9
Files
-
50a8c24475532a92a2958790c5847023e92523484ba07a54533a0979f4e623b9.exe windows x86
52e6c4850a003bd184dcc1fc4cda501c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
iphlpapi
GetAdaptersInfo
winmm
midiStreamOut
ws2_32
closesocket
kernel32
ReleaseMutex
user32
GetSysColorBrush
gdi32
CreateSolidBrush
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
DragFinish
ole32
StgCreateDocfileOnILockBytes
oleaut32
SafeArrayAccessData
comctl32
ord17
oledlg
ord8
wininet
FindFirstUrlCacheEntryA
msvcrt
strncpy
psapi
GetMappedFileNameW
Sections
.text Size: 1.6MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ