50f17a9ab7102d4344c557a8e524b453 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50f17a9ab7102d4344c557a8e524b453
Size

26KB
MD5

50f17a9ab7102d4344c557a8e524b453
SHA1

6b9758acf7d6ebb2110c9ffa475a01f34d42b0f3
SHA256

9a3f999240d3a18b99289ce50004226a59b6ce77156054e8f0c3dcef0e4f3c81
SHA512

f3a3d2028f4ca7d7be000331227623c226be96ab3e5141120a36a5cb4e30f830d61b30a8b29547d606137b9d674391f588ab0db34615fb7c42b666a8aec0667f
SSDEEP

768:hDk26xrAMF94/xVcPjfeZtKLd8s/U+fWqvMqj0st+FtulZhBDJL8iXY4t6:hofx0w8Vcct67OlIt+F6jB94i4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50f17a9ab7102d4344c557a8e524b453

Files

50f17a9ab7102d4344c557a8e524b453
.exe windows:4 windows x86 arch:x86

ed518a04db6a86fbb29ee78bda00a379

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadPriority
SetConsoleMenuClose
MoveFileWithProgressA
GetCommTimeouts
_lclose
SetFilePointerEx
DelayLoadFailureHook
InvalidateConsoleDIBits
ExpandEnvironmentStringsA
lstrcmp
EnumSystemLanguageGroupsA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE