Behavioral task
behavioral1
Sample
d50c7d04b94dadba2f94e1f2946ec88c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d50c7d04b94dadba2f94e1f2946ec88c.exe
Resource
win10v2004-20240226-en
General
-
Target
d50c7d04b94dadba2f94e1f2946ec88c
-
Size
4.2MB
-
MD5
d50c7d04b94dadba2f94e1f2946ec88c
-
SHA1
58893dfaecf1bbc27b4bcb7e4e56f09b2f053998
-
SHA256
ef8d188623545531ea1111ff93a1116a1c89a83aaf628673e51b0ddd2c1e3508
-
SHA512
5607c8d9ef42b2c13c76454ff76a13f87d1b681dccdddabf3c4222446e0f7d1d8c9b7b6d97304f5427afbed038751e8ba9c6c6940427462b1a6567668e84e0f5
-
SSDEEP
49152:mZdFXMl5kXMA1XXMl5kXM36DXMl5kXMA1XXMl5kXMJXMl5kXMA1XXMl5kXM36DXl:32E
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d50c7d04b94dadba2f94e1f2946ec88c
Files
-
d50c7d04b94dadba2f94e1f2946ec88c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE