Static task
static1
Behavioral task
behavioral1
Sample
50b6960e5cd5994d5c34b909017afc12.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
50b6960e5cd5994d5c34b909017afc12.exe
Resource
win10v2004-20231215-en
General
-
Target
50b6960e5cd5994d5c34b909017afc12
-
Size
27KB
-
MD5
50b6960e5cd5994d5c34b909017afc12
-
SHA1
4a420c78e744368be5ea9dfb771a34a59302946c
-
SHA256
d24cbb665cacf1f70f31a7bbbd6af66c9b988464a443a62662ddb4ddc833e526
-
SHA512
86697afde9551cd2651762b5036535d891604122c2a8773e5111ac02827b35b792a9df8eae96fac8802f56be2cf8f2a1f553461addcb720b67afaec53585306b
-
SSDEEP
384:3Sz/LlpcmELlXqk5n9x8OJrTLZUAyaQaK4WmthStOaEir149YiP6PmjxtqFrJJzy:CLh1UXPrnevmthSQarv/7O3Dsy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50b6960e5cd5994d5c34b909017afc12
Files
-
50b6960e5cd5994d5c34b909017afc12.exe windows:4 windows x86 arch:x86
442cbbdd7c336dcb19952a91a6fdaa7d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CreateStreamOnHGlobal
CoTaskMemFree
kernel32
GetWindowsDirectoryA
GetCurrentDirectoryA
GetDiskFreeSpaceA
CloseHandle
CreateFileA
CreateFileMappingA
CreateThread
CreateToolhelp32Snapshot
lstrlenW
lstrlenA
lstrcpynA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCommandLineA
lstrcpyA
lstrcmpiA
lstrcatA
WriteFile
WinExec
WideCharToMultiByte
UnmapViewOfFile
TerminateProcess
Sleep
Process32Next
Process32First
OpenProcess
MultiByteToWideChar
MapViewOfFile
LocalFree
LocalAlloc
LoadLibraryA
GlobalMemoryStatus
GlobalFree
GlobalAlloc
GetDriveTypeA
GetVolumeInformationA
GetVersionExA
GetTempPathA
GetSystemDirectoryA
GetProcAddress
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
GetPrivateProfileIntA
GetModuleFileNameA
GetLogicalDrives
GetLocaleInfoA
GetLocalTime
GetFileSize
GetComputerNameA
user32
ReleaseDC
GetDC
wsprintfA
oleaut32
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayCreateVector
advapi32
ChangeServiceConfigA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegEnumValueA
RegEnumKeyExA
ControlService
OpenServiceA
OpenSCManagerA
GetUserNameA
CloseServiceHandle
shlwapi
StrCmpNA
StrRChrA
StrChrA
StrStrIA
wsock32
socket
send
recv
gethostname
connect
closesocket
WSAStartup
ws2_32
WSAIoctl
rasapi32
RasGetEntryDialParamsA
RasEnumEntriesA
RasGetEntryPropertiesA
gdi32
GetDeviceCaps
Sections
Size: 20KB - Virtual size: 19KB
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 185KB
IMAGE_SCN_MEM_WRITE
Size: 257B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE