Static task
static1
Behavioral task
behavioral1
Sample
2b50a5a34f446f5a6473045b9a0c1b9a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2b50a5a34f446f5a6473045b9a0c1b9a.exe
Resource
win10v2004-20231215-en
General
-
Target
2b50a5a34f446f5a6473045b9a0c1b9a
-
Size
20KB
-
MD5
2b50a5a34f446f5a6473045b9a0c1b9a
-
SHA1
e8186cf883ec139916ebf21dd93ed329d0aee161
-
SHA256
1fc2790cd0b3bc48d8a6d6cfa89ff25aaf81790cd4f5ca317e3bd08037853a02
-
SHA512
be60c31a2b544675125a5a8001d12ec903c80b821ab5e34ce35c48ee688790c6ab37ce6700f772ac5c0fb02e13f3ea99230a79b0c99074834d6429ebe98a4635
-
SSDEEP
384:wWKhI5aEWh7R1FUN6Zs/Eeu5A6xnizc+oxcF0AD5242Xp66axNF:wWT0FI6W/EZ5dUoWahvZhaxH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b50a5a34f446f5a6473045b9a0c1b9a
Files
-
2b50a5a34f446f5a6473045b9a0c1b9a.exe windows:4 windows x86 arch:x86
f5c19dd4a90a26cc2a05b63665e1d761
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
CreateEventW
user32
CreateIcon
advapi32
RegCloseKey
Sections
.text Size: 1024B - Virtual size: 846B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE