50ec1fcbadb426ad7dee020baba46b294449088edb341f91c295d086be39e016 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50ec1fcbadb426ad7dee020baba46b294449088edb341f91c295d086be39e016
Size

1.3MB
MD5

2cc178ef2117749acc56de0c95da31cf
SHA1

80193072aa4f789fc3d40afb5a5adb99f20757eb
SHA256

50ec1fcbadb426ad7dee020baba46b294449088edb341f91c295d086be39e016
SHA512

c23463a39034ede59859a2c60831985e2ce0a6870deea4a8abeb35cdcf080faaf19272045d98a5606456d6c1ae2ffae420aec7b71f924ce20bd651977dd6e229
SSDEEP

24576:X9Zri1vMWqrQPKGR98SicH+D9y4/ijEQq38A9QaM+++++6++++6++++6++++6++F:jW1vrnKjSiceb/igL9pM+++++6++++6F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50ec1fcbadb426ad7dee020baba46b294449088edb341f91c295d086be39e016

Files

50ec1fcbadb426ad7dee020baba46b294449088edb341f91c295d086be39e016
.exe windows x86

ba6dc817222e7ea5e5d308f37f3ba97b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfc100

ord14061

msvcr100

_invoke_watson

kernel32

HeapSetInformation

user32

ReleaseDC

gdi32

CreatePen

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 84KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 855KB - Virtual size: 856KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ