Static task
static1
Behavioral task
behavioral1
Sample
50a801dc948840be00c36eebe6efedb0a84b22c56a7d38f6c154214ef6b5b263.exe
Resource
win7-20240903-en
General
-
Target
50a801dc948840be00c36eebe6efedb0a84b22c56a7d38f6c154214ef6b5b263
-
Size
1.8MB
-
MD5
e2939e03877a730d42312bd1427fde42
-
SHA1
c3401120709700077f5c709868c2d324bd114773
-
SHA256
50a801dc948840be00c36eebe6efedb0a84b22c56a7d38f6c154214ef6b5b263
-
SHA512
70693830d5b28040084618cc65cf5c95fdb5a382a2dfcb63fe049b2a47d28bec6d1d39b42ea317d4bf2a2153e8d58aecc113080a6cef0334a8f7b2bd9d6769b7
-
SSDEEP
24576:VVnu/IEJKZmL3z/Ttf7Oe2z1RwxzmlAvba5A7DSDx9r0vjoO8+woB5peu+5Im05b:JEFLjbtDOe2ZeBKA3g9rm++wox8G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50a801dc948840be00c36eebe6efedb0a84b22c56a7d38f6c154214ef6b5b263
Files
-
50a801dc948840be00c36eebe6efedb0a84b22c56a7d38f6c154214ef6b5b263.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
skoplldk Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gujuxmeu Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE