50f3f93afe3a8ffb732d26c60b82a710[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50f3f93afe3a8ffb732d26c60b82a710.exe
Size

606KB
MD5

50f3f93afe3a8ffb732d26c60b82a710
SHA1

09dc41ce50cf569aba7bac07a6c4aebcb174ed9b
SHA256

ad8269d02280b4ebfecaeab11afbc4b8a72e274f1ee0e0ba9ca097033ef4ee39
SHA512

01238ad3f53f3e8a968895a25a566bc4bf9b56b8cffb7b3fb6374fce5b64828d8beaaacab971aacf34fee7f9d091bf30604bd40f7533e4fc2f9436a2abad4fad
SSDEEP

12288:/IEFc8+UF9Ff6fM0WNk10Iq4YEgnDbXMoCX/bh:wECQKWNk10IhkXMo4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50f3f93afe3a8ffb732d26c60b82a710.exe

Files

50f3f93afe3a8ffb732d26c60b82a710.exe
.exe windows:4 windows x86 arch:x86

77ebf213a0c7cd81383636c31ee6016e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

ZwIsProcessInJob

user32

GetProcessWindowStation
TrackPopupMenuEx
GetForegroundWindow

kernel32

GetCurrentProcessId

Sections

.text
Size: 603KB - Virtual size: 604KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 245B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE