Static task
static1
Behavioral task
behavioral1
Sample
2050f485a771d4b42253b3efb123f614.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2050f485a771d4b42253b3efb123f614.exe
Resource
win10v2004-20231215-en
General
-
Target
2050f485a771d4b42253b3efb123f614
-
Size
771KB
-
MD5
2050f485a771d4b42253b3efb123f614
-
SHA1
46209017b5426b773cd19b3d04d5356c3a0ed489
-
SHA256
67e0726af7e82eaddb5b537e9557f4edf157b3ecceb2a5da383932dd20aaf56d
-
SHA512
5c29db6af8bc0147faf7c866fbda5106a0378bac51c5055f13dcf45ddc6218c9c4aadc34a9554fd816df30f5e2829be0212ec8048ab9d1a6e6755311ce1dce93
-
SSDEEP
12288:ENNvU6tT3PFeLaRy2eOiegKiVrUdIZsggOYECaBwQ2tb5JLrnyl0:uNcC3yaQ2LmVId41B+5vM0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2050f485a771d4b42253b3efb123f614
Files
-
2050f485a771d4b42253b3efb123f614.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 475KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ