Static task
static1
Behavioral task
behavioral1
Sample
50f6db564035838f2c66144b52f1a7d010ff037f378c4cf06a15df10b949f94b.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
50f6db564035838f2c66144b52f1a7d010ff037f378c4cf06a15df10b949f94b.exe
Resource
win10v2004-20240426-en
General
-
Target
50f6db564035838f2c66144b52f1a7d010ff037f378c4cf06a15df10b949f94b
-
Size
12KB
-
MD5
806f958ce979bde00746e8cc48e438aa
-
SHA1
b91005ca8f6722f950cc43f590e9501a396fb111
-
SHA256
50f6db564035838f2c66144b52f1a7d010ff037f378c4cf06a15df10b949f94b
-
SHA512
483a6cb1f3839d2e8df309fe1b1a6f8bd559d76b4f6556a91aae51827f71b6a7d60ef8cf75dbb8c7d0dff22bb79a98f1cd080201db93606bacc03012b2de5300
-
SSDEEP
384:nL7li/2z0q2DcEQvdQcJKLTp/NK9xae1:L4MCQ9ce1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50f6db564035838f2c66144b52f1a7d010ff037f378c4cf06a15df10b949f94b
Files
-
50f6db564035838f2c66144b52f1a7d010ff037f378c4cf06a15df10b949f94b.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ