Static task
static1
Behavioral task
behavioral1
Sample
50a5717c4f6c47b1ae9be99ff904c781.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
50a5717c4f6c47b1ae9be99ff904c781.exe
Resource
win10v2004-20231215-en
General
-
Target
50a5717c4f6c47b1ae9be99ff904c781
-
Size
118KB
-
MD5
50a5717c4f6c47b1ae9be99ff904c781
-
SHA1
240a3a0e87d56b419748073d39d1a40695f0941a
-
SHA256
4cba1c9c2ba0006b3cc0f56ac8ab4056e36fadac6a887dda8f9bee589b03a92e
-
SHA512
9f557ac9f0297c22eeea237099f0f59e02137ad7bc835f61b60bc953403d3e4856d3f298627e5e901588ea5e483057b151c97f0d2a5d75558eb5b149bda09fa0
-
SSDEEP
3072:S9P2gd0PKWUKVSfy+kYQph2AtNBj6+ROLpQtsoywdIcVGze:IP2gd0pIrAtNBzRSQpy6IL6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50a5717c4f6c47b1ae9be99ff904c781
Files
-
50a5717c4f6c47b1ae9be99ff904c781.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rawdat Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE