50720e840fb3b3fbfd95c9c9dafba46d

Sharing

Copy URL

Twitter E-mail

General

Target

50720e840fb3b3fbfd95c9c9dafba46d
Size

319KB
MD5

50720e840fb3b3fbfd95c9c9dafba46d
SHA1

c93dc2cf972c2aab2edd20507f1517e8d511f1cb
SHA256

a21caefc595db1e185d1556931097fd616a9800916b799de3e8e195ebaf06770
SHA512

d3d32e46324a64933940ee7654a8de8956472c9316f450f235b2d6dff1e3fa57705f2807b4d086bd428011c3feda998beb3b9dd68d883bd849d80724d3c4ee13
SSDEEP

6144:29YKcVW5OXZuULU2q7NMqEGvP7TTHqvTVuT3N5ypFv39Mj0mXE8zDjcPnT7H+mxg:/KcE5OXZuUNYNMXiDTTHqvQT3N8pFv38

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50720e840fb3b3fbfd95c9c9dafba46d

Files

50720e840fb3b3fbfd95c9c9dafba46d
.dll windows:4 windows x86 arch:x86

548ff9b537a546571022171b5d215412

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

IsBadReadPtr
VirtualAllocEx
GetModuleHandleA
GetACP
ExitThread
GlobalAlloc
VirtualAlloc
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
LoadLibraryA
GetOEMCP

msvcrt

sin
swprintf
sqrt
wcschr

gdi32

CopyEnhMetaFileA
GetClipBox
CreateBitmap
LineTo
GetPaletteEntries
GetPixel
GetObjectA
GetDIBColorTable
BitBlt
CreateBrushIndirect

shlwapi

SHStrDupA
SHQueryInfoKeyA
SHDeleteKeyA
SHEnumValueA
PathFileExistsA
SHQueryValueExA
SHGetValueA

Sections

CODE
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES0
Size: 512B - Virtual size: 215B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES6
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES2
Size: 512B - Virtual size: 47B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES9
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES3
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES7
Size: 1024B - Virtual size: 782B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

548ff9b537a546571022171b5d215412

Headers

File Characteristics

Imports

kernel32

msvcrt

gdi32

shlwapi

Sections

CODE Size: 116KB - Virtual size: 115KB

DATA Size: 185KB - Virtual size: 184KB

RES4 Size: 2KB - Virtual size: 1KB

RES0 Size: 512B - Virtual size: 215B

RES6 Size: 1KB - Virtual size: 1KB

RES2 Size: 512B - Virtual size: 47B

RES9 Size: 1KB - Virtual size: 1KB

RES3 Size: 512B - Virtual size: 196B

RES7 Size: 1024B - Virtual size: 782B

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 1024B - Virtual size: 688B

CODE
Size: 116KB - Virtual size: 115KB

DATA
Size: 185KB - Virtual size: 184KB

RES4
Size: 2KB - Virtual size: 1KB

RES0
Size: 512B - Virtual size: 215B

RES6
Size: 1KB - Virtual size: 1KB

RES2
Size: 512B - Virtual size: 47B

RES9
Size: 1KB - Virtual size: 1KB

RES3
Size: 512B - Virtual size: 196B

RES7
Size: 1024B - Virtual size: 782B

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 1024B - Virtual size: 688B