50c7dedd887249ea22681ff3cd253969 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50c7dedd887249ea22681ff3cd253969
Size

3KB
MD5

50c7dedd887249ea22681ff3cd253969
SHA1

53fcd54fc534bfa57f65314ffc772f0014322dee
SHA256

20e7e9d4d2b0c586ee610d18e05ebd2bd9d9c0377085dc1ccb1f3694314937fe
SHA512

1e4b0856d67fbd06106f5cea6f702511b8532756ada3746c73e1d8df977cd7b12bac236394bcc89de743f9d1eeba0f899155a315d644380de5836257f2f2284e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50c7dedd887249ea22681ff3cd253969

Files

50c7dedd887249ea22681ff3cd253969
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ