Behavioral task
behavioral1
Sample
50fe43f3f2c8732caba2286541d89064.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
50fe43f3f2c8732caba2286541d89064.exe
Resource
win10v2004-20231215-en
General
-
Target
50fe43f3f2c8732caba2286541d89064
-
Size
118KB
-
MD5
50fe43f3f2c8732caba2286541d89064
-
SHA1
7a40cc15a386a7dd015cda2c69e0e67a0ea058d9
-
SHA256
7de1e9992cd864751dc8822e931508d8f76ef29da9fbe0479e3c0ac6ca854d4c
-
SHA512
c08fdde6de7087711808ee7b50f1cc82a81af024ffe4ea45779f5aa3744ba0f4d57a169a99e2fa4fd8e391b1d045330076265e8e9dea5fa78513c95bd79c43ba
-
SSDEEP
1536:GU8V+CKc7fooekeJOSSv2hJGoj4ogX3bTysmf:GU8V7KGbezOvQ4ogXLlmf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50fe43f3f2c8732caba2286541d89064
Files
-
50fe43f3f2c8732caba2286541d89064.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE