Static task
static1
Behavioral task
behavioral1
Sample
50649c87d22347321da6247f2dda8e64.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
50649c87d22347321da6247f2dda8e64.exe
Resource
win10v2004-20231222-en
General
-
Target
50649c87d22347321da6247f2dda8e64
-
Size
28KB
-
MD5
50649c87d22347321da6247f2dda8e64
-
SHA1
8e680a98adcc928011af5687087bafabe2cd4123
-
SHA256
22af54aac38914531420039eef53679b5285f63047049b686a0c13e984d35cf4
-
SHA512
3cc72e1d463acef07fb93d724e8415e0887a18d67b37d172851a9e2697e11296badc0539ec78091b689235ce4568538aeb2fe85badf05822ce371475a0b23aae
-
SSDEEP
768:1LHo8Zvgfd03ivf6CJkVJwIWv11pdFMqMh:bCF0nIVKjh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50649c87d22347321da6247f2dda8e64
Files
-
50649c87d22347321da6247f2dda8e64.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 139KB - Virtual size: 233KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ