Static task
static1
Behavioral task
behavioral1
Sample
50b32932b9f18bcc2831aa83f4f3cca77d12540d7a78853409e18450921834ad.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
50b32932b9f18bcc2831aa83f4f3cca77d12540d7a78853409e18450921834ad.exe
Resource
win10v2004-20241007-en
General
-
Target
50b32932b9f18bcc2831aa83f4f3cca77d12540d7a78853409e18450921834ad.exe
-
Size
544KB
-
MD5
0e64b6d4d68876c72a62d2d393fd8e15
-
SHA1
91451cff1cf4f6e69731c76c7b1113e455232c9c
-
SHA256
50b32932b9f18bcc2831aa83f4f3cca77d12540d7a78853409e18450921834ad
-
SHA512
1cf9e4917fae854df6fbc844574f1a2874c8033b90a189777a292adfbee21b7a3825352935e2d65da1d14ef7603ca16d69fb1b12843329fdf43257c527b77d1e
-
SSDEEP
12288:QiK05T+NhaEsDPEYkk3vNLXdVonSyNAx2ssT5E04j:KttcKivRdWnSyErsG0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 50b32932b9f18bcc2831aa83f4f3cca77d12540d7a78853409e18450921834ad.exe
Files
-
50b32932b9f18bcc2831aa83f4f3cca77d12540d7a78853409e18450921834ad.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 528KB - Virtual size: 527KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ