50b3fa41b13406aeef1ca7bf5c90bde5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50b3fa41b13406aeef1ca7bf5c90bde5
Size

752KB
MD5

50b3fa41b13406aeef1ca7bf5c90bde5
SHA1

6565768f352d5e8ac65a6b1806074c1d7389185c
SHA256

6ddfe7ccf4501489eb00c86482855e95125769b8429118da3e2b5dbf5440bcf0
SHA512

2b67032f80ccd2569e9d9476caec41b56294ea449dde01a77a8aa7aa6a730b352be8d99f5d6fb2fc06465f95dde4538bcffa798c5c05945dc6c911bb89a251b6
SSDEEP

12288:9YTZ9oowxuESg//fjlbdYaJuY8DAC6UdPs2kuEt6hj231S9/s:9ss8hgPjbDu1DMO0puEUJ2e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50b3fa41b13406aeef1ca7bf5c90bde5

Files

50b3fa41b13406aeef1ca7bf5c90bde5
.exe windows:4 windows x86 arch:x86

835d63023e903448b4db45741ab02777

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesW
SetLastError
CloseHandle
GetLocalTime
ExitProcess
HeapSize
GetFileSize
Sleep
DeleteFileA
WaitForMultipleObjects
GetEnvironmentVariableA
ReleaseMutex
GetTickCount
GetStartupInfoW
HeapCreate
GetModuleHandleA
RemoveDirectoryW
GetStdHandle
CreateMutexW
CreateFileA
GetTickCount
WaitForSingleObject
OpenThread
FindClose
GetCurrentDirectoryA

user32

PeekMessageA
GetDC
CallWindowProcW
GetCursorPos
DispatchMessageW
GetSysColor
MessageBoxA
DispatchMessageW
GetWindowLongA
GetClassInfoA
GetDC
GetDC
GetDC

wmiprop

WmiPropCoInstaller
WmiPropCoInstaller
WmiPropCoInstaller
WmiPropCoInstaller

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 746KB - Virtual size: 745KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ