Behavioral task
behavioral1
Sample
50e6ae26daf6a0fb049d45d81b8917f9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
50e6ae26daf6a0fb049d45d81b8917f9.exe
Resource
win10v2004-20231222-en
General
-
Target
50e6ae26daf6a0fb049d45d81b8917f9
-
Size
80KB
-
MD5
50e6ae26daf6a0fb049d45d81b8917f9
-
SHA1
71bbfa32b148c55d3f24f9c13741f8421ea68e38
-
SHA256
8e68fcaa203eaecffab9e21e6890d40e9de7580e0aafcc6c1be5c8aa96551352
-
SHA512
82c7d82d52d287daa64b4b1b9fc404f21b0cf28736ffbb2a6121e07f25463d5e716bb48042f2c2962d1656ab2eb664d511079747a34b9913f77e6cae52c75969
-
SSDEEP
1536:D2P05HIpr4amPqESLZF9QnND4hz1QIegQTSMwUZ:yeHcmPLSNENDmzETSFC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50e6ae26daf6a0fb049d45d81b8917f9
Files
-
50e6ae26daf6a0fb049d45d81b8917f9.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 304KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 229KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE