Static task
static1
Behavioral task
behavioral1
Sample
50a918af3cb3f7e4cf8d8ae2770042be.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
50a918af3cb3f7e4cf8d8ae2770042be.exe
Resource
win10v2004-20231215-en
General
-
Target
50a918af3cb3f7e4cf8d8ae2770042be
-
Size
14KB
-
MD5
50a918af3cb3f7e4cf8d8ae2770042be
-
SHA1
5bfb417ecb516c69c156d2a1dfdd55d356882d52
-
SHA256
75feb36852039831b6d71760b389cb89fd86f838dd7d3113332959fed0269744
-
SHA512
75419efbe180d566486fb255ef9e5a954e6ac83a7b315cd3aa1410d4986423d227498a6781ec2c4abd92c1ef1ff9c517faec5ca4c5db1e0713f7c7b6247a99b2
-
SSDEEP
384:uC6XdG8HP+paCX08+PR3DKTbKO4Cui3W2m:urI8GhZO9uPKOL+9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50a918af3cb3f7e4cf8d8ae2770042be
Files
-
50a918af3cb3f7e4cf8d8ae2770042be.exe windows:4 windows x86 arch:x86
b29cc533807401b27b9e4655da6b662f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetOpenA
InternetReadFile
InternetOpenUrlA
shell32
SHGetFolderPathA
ntdll
ZwQuerySystemInformation
ZwCreateSection
shlwapi
SHSetValueA
SHGetValueA
wsock32
__WSAFDIsSet
select
getsockname
getpeername
shutdown
accept
listen
bind
inet_ntoa
gethostbyname
gethostname
WSACleanup
closesocket
connect
socket
WSAStartup
recv
send
advapi32
RegSetValueExA
OpenServiceA
CloseServiceHandle
StartServiceA
CreateServiceA
OpenSCManagerA
RegCreateKeyA
RegCloseKey
user32
FindWindowExA
wsprintfA
SendMessageA
FindWindowA
MessageBoxA
kernel32
WaitForSingleObject
SetThreadPriority
OpenMutexA
CreateMutexA
FreeLibrary
GetLastError
GetEnvironmentVariableA
ResumeThread
SetThreadContext
GetThreadContext
WriteProcessMemory
VirtualAllocEx
TerminateProcess
CreateProcessA
LocalFree
LocalAlloc
DeviceIoControl
LoadLibraryExA
ExitThread
CreateThread
GetProcAddress
LoadLibraryA
CopyFileA
GetModuleFileNameA
GetModuleHandleA
WinExec
DeleteFileA
lstrcatA
Sleep
UnmapViewOfFile
MapViewOfFile
lstrlenA
OpenFile
CloseHandle
WriteFile
VirtualFree
VirtualAlloc
ExitProcess
Sections
.text Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE