Static task
static1
Behavioral task
behavioral1
Sample
50391c9ad421b74d5ef68e0bc0d8b0c15b67a7d615993e50f764772b25cf9972.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
50391c9ad421b74d5ef68e0bc0d8b0c15b67a7d615993e50f764772b25cf9972.exe
Resource
win10v2004-20231023-en
General
-
Target
50391c9ad421b74d5ef68e0bc0d8b0c15b67a7d615993e50f764772b25cf9972
-
Size
12.3MB
-
MD5
cd427980f13646bb890b21fb71a9d143
-
SHA1
377bae6dbc9d7cd8d4ae616c129cb4459cbd44a3
-
SHA256
50391c9ad421b74d5ef68e0bc0d8b0c15b67a7d615993e50f764772b25cf9972
-
SHA512
445bb1730d849824859b996acb18cd7e2edc7ce0e1edc2c2adc9896144549200ffe949ea223d63c446a2731d4352d85c76b456205505b65ec6d51213db202d23
-
SSDEEP
196608:8UGYLFmFBip+B4F29BKpdqC7MRPOZzIkNbdA+qkkmKblZBnvfgwbofk:8Udp6sp8FUn57MyIUq+Z8TJvbg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50391c9ad421b74d5ef68e0bc0d8b0c15b67a7d615993e50f764772b25cf9972
Files
-
50391c9ad421b74d5ef68e0bc0d8b0c15b67a7d615993e50f764772b25cf9972.exe windows:4 windows x86 arch:x86
398e83e6102876a2f92a6b8889164381
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamGetFrame
winmm
midiStreamClose
ws2_32
accept
kernel32
GetVersion
user32
GetSysColorBrush
gdi32
CreateSolidBrush
winspool.drv
OpenPrinterA
comdlg32
ChooseColorA
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
_TrackMouseEvent
Sections
.text Size: - Virtual size: 994KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 870KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 347KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 3.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 16KB - Virtual size: 12KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 380KB - Virtual size: 377KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE