Behavioral task
behavioral1
Sample
50b58a780b0ce3a884a60918020b60c7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
50b58a780b0ce3a884a60918020b60c7.exe
Resource
win10v2004-20231215-en
General
-
Target
50b58a780b0ce3a884a60918020b60c7
-
Size
9KB
-
MD5
50b58a780b0ce3a884a60918020b60c7
-
SHA1
885514436399d68384208f6a4e22cb9196a84109
-
SHA256
8c874ea270488fd3099ffe78a4170f482443cbb3858f09242f08e6942238c834
-
SHA512
17cf1043f86de80f9b62611d440a2f511efc385d5046a95409cbfbd8df28c05a3e1cbc0ab3e999459cb73f16dd65f3901cc4bf3b1cbdca16a76a96e1371e9106
-
SSDEEP
192:4o/XXfAcMDC1RITtrx7WXXHuDpkLEquh3QDWE:4kXHMDC1STFx7EXLIqWI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50b58a780b0ce3a884a60918020b60c7
Files
-
50b58a780b0ce3a884a60918020b60c7.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Sections
UPX0 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE