Static task
static1
Behavioral task
behavioral1
Sample
04b50ae7e247770b5ce6bbddb8ac37e7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
04b50ae7e247770b5ce6bbddb8ac37e7.exe
Resource
win10v2004-20231215-en
General
-
Target
04b50ae7e247770b5ce6bbddb8ac37e7
-
Size
233KB
-
MD5
04b50ae7e247770b5ce6bbddb8ac37e7
-
SHA1
0b76d13d54cd62424b6ebb752af34925f993293b
-
SHA256
92c8168371a2cebac257d391b979e5e451a3ef51d80a2c9597b85690c97f3b1a
-
SHA512
4909fa6c975c704a9c867d2e1afd7a9402ec58d01d9b87b18cd8cff892b75989613ffa01688c1909b6b54db5f4717d9fe8947b8f290a918e058754ab63485144
-
SSDEEP
6144:Ovfls+pNIeypt8iNuV/9bj+x8IGqc6CEg:OvBN2ptvGG8IGqc6C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04b50ae7e247770b5ce6bbddb8ac37e7
Files
-
04b50ae7e247770b5ce6bbddb8ac37e7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: - Virtual size: 337KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.delete Size: 512B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pklstb Size: 214KB - Virtual size: 230KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relo2 Size: 512B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ