Static task
static1
Behavioral task
behavioral1
Sample
50e7d8d621ef9470226ef4d9dee6c888.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
50e7d8d621ef9470226ef4d9dee6c888.exe
Resource
win10v2004-20231215-en
General
-
Target
50e7d8d621ef9470226ef4d9dee6c888
-
Size
50KB
-
MD5
50e7d8d621ef9470226ef4d9dee6c888
-
SHA1
ade5f9d7b3ea538be86676a368fb88b454900518
-
SHA256
dbfb629d349df075b1111297b56452e5a844a9f44051e3e400dc32625db90c21
-
SHA512
0f0de3e2571056dfc8f869678d8cfe85ee36c0ff02c571a078c2eb0c7bc03658b674b92481f98a1d35cf008a4e044c5b51eaec552be819a95947a8da2f838228
-
SSDEEP
768:yC5UNrL+OI7klXSgqPlRaWWF0vK5jSd+3IzjOCBR06LxVE6As+:y3Nr6OIwli0Cx+3IzdC6Lzrg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50e7d8d621ef9470226ef4d9dee6c888
Files
-
50e7d8d621ef9470226ef4d9dee6c888.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ