Static task
static1
Behavioral task
behavioral1
Sample
b50e422c4e1a25e31f8868137e35c747.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b50e422c4e1a25e31f8868137e35c747.exe
Resource
win10v2004-20240226-en
General
-
Target
b50e422c4e1a25e31f8868137e35c747
-
Size
13KB
-
MD5
b50e422c4e1a25e31f8868137e35c747
-
SHA1
5ff5f213a415bcf2e7895ef666442c70106cfd9d
-
SHA256
c33d6a7b16f3418244ee11e08d754cc710313ab6b3c8d87f8846a6cf6902f468
-
SHA512
8f0a07d9694b7f36895878bd8422fd352e22ece3659be08fbd593592b2ec23f398ab1bcb6d66a32f2950f3cd772a8c3f7ec96ba3cba79cbdb5d97eff5548f238
-
SSDEEP
192:LMD01tCGOuK79tK/DBIrJHAU2cnmZNzz3XD+4OkSO4uAJ2E5TaXvx:E01wGOumD+Bwg1kaNzDSkSO43VpaXp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b50e422c4e1a25e31f8868137e35c747
Files
-
b50e422c4e1a25e31f8868137e35c747.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 1003B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 155B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp0 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ