Static task
static1
Behavioral task
behavioral1
Sample
d50ca3f81a9fbfbb862111f056c860b6.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d50ca3f81a9fbfbb862111f056c860b6.exe
Resource
win10v2004-20240226-en
General
-
Target
d50ca3f81a9fbfbb862111f056c860b6
-
Size
66KB
-
MD5
d50ca3f81a9fbfbb862111f056c860b6
-
SHA1
b568017732cd08114829e0bda1f7f715b3e70a4e
-
SHA256
eef08abbf217708e292e591bfd8b1a1a6fc70711eedc91c34df5ae0535582538
-
SHA512
e9394242a2f484a9be90e698f61a38a09283b629ed86c546422973932cf45a237a7d0323767c65510d8661e9791bc11710dd25cbc35672945e06948332f77c55
-
SSDEEP
1536:4+86eabcyDAEvVRNTpCnL59Q1YA2cYSm/H4686TMcwpZPG9P3vyuTLXk:DRbc+FvVRNTpCnvQ1YA2l/Ytg0yVyMk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d50ca3f81a9fbfbb862111f056c860b6
Files
-
d50ca3f81a9fbfbb862111f056c860b6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
WCGL Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WCGL Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE