Static task
static1
Behavioral task
behavioral1
Sample
50db4b6d47d6ee250bdd29ded1494975ea7786c200375a588d537cec2470fdfa.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
50db4b6d47d6ee250bdd29ded1494975ea7786c200375a588d537cec2470fdfa.exe
Resource
win10v2004-20240412-en
General
-
Target
50db4b6d47d6ee250bdd29ded1494975ea7786c200375a588d537cec2470fdfa
-
Size
198KB
-
MD5
99b47abf81854e17c735e3e31335a6d6
-
SHA1
42edecb5b007ec65b57f7fb5de05bd591416183d
-
SHA256
50db4b6d47d6ee250bdd29ded1494975ea7786c200375a588d537cec2470fdfa
-
SHA512
a1e583b9ae3988429df71044a926970536ae1d6ebeb65d5352f8ac31e10c191cc13443a04d95e01f81c871d3b1e88d9805649c5ecf89e5c4cd359be3f84c62dc
-
SSDEEP
3072:mftffjmNvV+jEciNTtJ4StA5UdkrNoMO7ibp/:eVfjmNvV+EcItvUrOMO7ibp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50db4b6d47d6ee250bdd29ded1494975ea7786c200375a588d537cec2470fdfa
Files
-
50db4b6d47d6ee250bdd29ded1494975ea7786c200375a588d537cec2470fdfa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE