Static task
static1
Behavioral task
behavioral1
Sample
50286b9613e1f2529fff417694aaf041.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
50286b9613e1f2529fff417694aaf041.exe
Resource
win10v2004-20231215-en
General
-
Target
50286b9613e1f2529fff417694aaf041
-
Size
695KB
-
MD5
50286b9613e1f2529fff417694aaf041
-
SHA1
581179d25efdf1e7fc65c7cb9a6c2f4c1227c2d9
-
SHA256
dc1ac0dbfe9b9aedbded335cc862d8f6ccd9f29ff75c2db37d0f72297ce93b63
-
SHA512
c7ef4e8a0ebba4ad40d5e443e587832b71a116f03bb4f64c489a9498be81858d8b1816b76ece94f6ada067427606690e7f3ffa7678e5190680a21313ed07988d
-
SSDEEP
768:r1FrQT8UWFKjS0duZs7i8fo9FE5h1ERMc07GRwogIegTrU+UN9QSb:r16l9Y9FET1EllSogIegT49Qw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50286b9613e1f2529fff417694aaf041
Files
-
50286b9613e1f2529fff417694aaf041.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 408KB - Virtual size: 407KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 149KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ