Static task
static1
Behavioral task
behavioral1
Sample
50e9d4b4cfaa847be20e9813edb0589b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
50e9d4b4cfaa847be20e9813edb0589b.exe
Resource
win10v2004-20231222-en
General
-
Target
50e9d4b4cfaa847be20e9813edb0589b
-
Size
104KB
-
MD5
50e9d4b4cfaa847be20e9813edb0589b
-
SHA1
68c12d54db90f07dc65bdb179f7e5ab8450ca4fe
-
SHA256
09d21f9bad4e03d18e94a0219d9185e849324f9aadb49daa5bbfd704cc06d022
-
SHA512
bf5c48a27bdbb42b14e968257aceda66c2908c5163ab0e7a7f571e0397eb0d5b3daced900874abb79749e198d619091b154e0a5ee513872edfdd85be76b6a506
-
SSDEEP
3072:4gpm7sFn/wLxtczVARPAJSmICXF5YKzdblD:npGE2xtcRAngF3b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50e9d4b4cfaa847be20e9813edb0589b
Files
-
50e9d4b4cfaa847be20e9813edb0589b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.perplex Size: 1KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ