Static task
static1
Behavioral task
behavioral1
Sample
50c5eb159c1df9e3627a2dc270297d65e759fba62e4c6081619365357f188aac.exe
Resource
win7-20240903-en
General
-
Target
50c5eb159c1df9e3627a2dc270297d65e759fba62e4c6081619365357f188aac.exe
-
Size
2.1MB
-
MD5
943ef4ceee0552b2a23e7f50163c16a0
-
SHA1
108869e2d6f5298b80ffcda8a708d63bff02fb4a
-
SHA256
50c5eb159c1df9e3627a2dc270297d65e759fba62e4c6081619365357f188aac
-
SHA512
0d4c2091ba41cf6aab0e376212694920b6b784f9835a2bfc0d8d0229c74d085615a83e772765ff2ec7f637264e61706d5d276feb4b4f40a8117e6c523203c9fc
-
SSDEEP
49152:58VIWqAyU/KinXQJvMmWGupmgalt8DwsiXKml2mpj2a+w93:8IuB/KiXAvMmWdAlqEImbfj93
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50c5eb159c1df9e3627a2dc270297d65e759fba62e4c6081619365357f188aac.exe
Files
-
50c5eb159c1df9e3627a2dc270297d65e759fba62e4c6081619365357f188aac.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 413KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fcyxulxu Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
umqfzdml Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE