Static task
static1
Behavioral task
behavioral1
Sample
50b981aaf6a6164bd3bd6b3916e4ca16.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
50b981aaf6a6164bd3bd6b3916e4ca16.exe
Resource
win10v2004-20231215-en
General
-
Target
50b981aaf6a6164bd3bd6b3916e4ca16
-
Size
29KB
-
MD5
50b981aaf6a6164bd3bd6b3916e4ca16
-
SHA1
0a98ed013f63a165a4e294d8325e771d2ac189d7
-
SHA256
657afd7ba8e5de4c6c076612d7dfa8bcbb0aecf290685d47bb90972a27be0865
-
SHA512
0605524c58d92a2c1c0e091e31337642ff4e6d970843706a3aea805d718e9448a2fde0b431cf63c597b6af69ddeccedd7e65bdda42b469dfc67a8aeed8163a9f
-
SSDEEP
384:iHtjOaN9eEouqnw72KydOto72qhRXC05pgum4s:iNjbpJXtqC0Wu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50b981aaf6a6164bd3bd6b3916e4ca16
Files
-
50b981aaf6a6164bd3bd6b3916e4ca16.exe windows:4 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
.text Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE