Static task
static1
Behavioral task
behavioral1
Sample
50bf8a57e6c72902ca991fb1cc2e6f5b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
50bf8a57e6c72902ca991fb1cc2e6f5b.exe
Resource
win10v2004-20231201-en
General
-
Target
50bf8a57e6c72902ca991fb1cc2e6f5b
-
Size
54KB
-
MD5
50bf8a57e6c72902ca991fb1cc2e6f5b
-
SHA1
b9ed29225055328f8f0df704b967dc2bb8dc5499
-
SHA256
3eb76285320bc1825155937dabe2546eeb56fb58d12798a57e0263a25647e1b8
-
SHA512
2ce7154b47e55d4d653d28a689a34229743bf9deb9a82017d851baa339e7a4d2c0a54976ecf21333652294beeac0d09441430545885b0123698ef0fc345fa9b8
-
SSDEEP
1536:SYAxd6vX5fFfxRuwAqTNRJ4oahk06FngR2cnLPDngAng0nI:MSX5fFAqTObkXaUf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50bf8a57e6c72902ca991fb1cc2e6f5b
Files
-
50bf8a57e6c72902ca991fb1cc2e6f5b.exe windows:4 windows x86 arch:x86
d8830768e26d5542e5a19dad95d6bbc7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
ExitProcess
user32
FindWindowA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE