Behavioral task
behavioral1
Sample
50803e2c00a35657dff5a6b581495472.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
50803e2c00a35657dff5a6b581495472.exe
Resource
win10v2004-20231222-en
General
-
Target
50803e2c00a35657dff5a6b581495472
-
Size
12KB
-
MD5
50803e2c00a35657dff5a6b581495472
-
SHA1
f5e18c76c0bbf0fd7ed999c45602212a2595db6e
-
SHA256
5525b395f1fbf374d12bb2049051d5390e0b6fb4ec71cb76ea319fbafede9cbd
-
SHA512
a18c9557422080dd9e05fe2ff86e3070548495ca4cecfc88bf77a0b534650e7e4233a29ac8271db0ebb191c43c9311d534e869cacc711d6cc518e06298d58c51
-
SSDEEP
384:iqZuXe9t2DD3bZ2t2twq6uLJ+A57LI0JjX7:idgt2TQERlhZr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50803e2c00a35657dff5a6b581495472
Files
-
50803e2c00a35657dff5a6b581495472.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE