50af4d20476ab2418ef92f13d019c9b1 | Triage

Sharing

General

Target

50af4d20476ab2418ef92f13d019c9b1
Size

31KB
MD5

50af4d20476ab2418ef92f13d019c9b1
SHA1

b1e3d425b6d64feba9f60d6509743571f445d86a
SHA256

34ef54bd8a13999fdbcf438f8f9aaa8eabcb3340bfe5b70bb8b2c7a46168b7ba
SHA512

003f43e89e5d58689de6180852b91dd9190e8c37718abd388d8b4b71c9af39cae571cfb9d084f4ae04ef5df7628ba543ecb9ac74ae73175339af106fb1500861
SSDEEP

768:GKh7TzTBziifTeiZXVWihwENnh0L71TLuNfQf73:nZ/EENh81TaNK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50af4d20476ab2418ef92f13d019c9b1

Files

50af4d20476ab2418ef92f13d019c9b1
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ