Static task
static1
Behavioral task
behavioral1
Sample
50869f9aaaa6c80ab12b02f6c36f87c0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
50869f9aaaa6c80ab12b02f6c36f87c0.exe
Resource
win10v2004-20231215-en
General
-
Target
50869f9aaaa6c80ab12b02f6c36f87c0
-
Size
97KB
-
MD5
50869f9aaaa6c80ab12b02f6c36f87c0
-
SHA1
bded6e2c7ed586ea5dc7355286a1dd96bb239242
-
SHA256
59b905a78ca7bb6968e34ffa15b2a8028f707b65ac4dedf210636050ad8282ba
-
SHA512
e3ecd513c2d136bff2302e281af29db9c545a6e305f6b0e42641bb4adbe65310a6ac0ecbc061f4ec801e49b8da29ab7e617e96cc6642e1e26be081c571c8cc9b
-
SSDEEP
1536:0hlq3QlwG27P4NSM7T7LQZLTzS9TJHRgJ8k+Rn//OPX6wNYBmBeBmZya1ymdz:PkWgHwfzEtxgJ8k+Rn/MvqskYZyasAz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50869f9aaaa6c80ab12b02f6c36f87c0
Files
-
50869f9aaaa6c80ab12b02f6c36f87c0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 329KB - Virtual size: 329KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 3KB - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 16B - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 382KB - Virtual size: 382KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE