50bde10a9b35bcb21db72c334836f8e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50bde10a9b35bcb21db72c334836f8e4
Size

158KB
MD5

50bde10a9b35bcb21db72c334836f8e4
SHA1

333f3b5a590f563d3269329d4449181431d4c999
SHA256

e929ca0ee707ac03a98fc7724942cf2d16c37344de26092c2ccc62996036f77e
SHA512

a048ed86360671e46fd52f24e2b9a28233ccd4bfd5cd83440c7cabe3b7bc3d14e479af5632838da22281b674b9e3b8e752be09d1f116c28f2c154cd481edbc09
SSDEEP

3072:UnEpVwosSSA748TYGB/AaXgQCGzj1ByFD0MVU/bz8g8R0lYa76S5:fptsSHTYqPBCGzJByFSv8SlY85

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50bde10a9b35bcb21db72c334836f8e4

Files

50bde10a9b35bcb21db72c334836f8e4
.exe windows:4 windows x86 arch:x86

3f35115a995406ab57e0afcc97b046f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupIterateCabinetW

ole32

CoUninitialize
CoInitializeEx

shell32

ShellExecuteExW
ShellExecuteW

user32

MessageBoxW
wsprintfW

kernel32

FreeLibrary
ExitProcess
GetStartupInfoW
LockResource
SetEnvironmentVariableW
CreateFileW
LoadLibraryA
GetModuleFileNameW
lstrcpyW
WriteFile
VerSetConditionMask
WaitForSingleObject
GetCommandLineW
GetTempPathW
SizeofResource
FindResourceW
GetLastError
GetModuleHandleW
GetProcAddress
LoadResource
GetExitCodeProcess
CloseHandle
DeleteFileW

Sections

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 404KB - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ