501cb6153f3e1ed1c0c8cff7d01f26e7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

501cb6153f3e1ed1c0c8cff7d01f26e7
Size

39KB
MD5

501cb6153f3e1ed1c0c8cff7d01f26e7
SHA1

3685ca9b7604a0e42b535fa9ce4a0123eb316257
SHA256

e11bf7644a0d3757ebde26e598d5b8a2503f80e2fc500234d3b6116e930e9698
SHA512

50b20b1e379e9da175c927dce39165cf1bc9796a7b3d89b7564defc10c1b6ae0279fda925b4fb3e39f708e4b09f5247e69681c3158ee186e27c66deb5d62ba7a
SSDEEP

384:nl3qCPwxYb5tAt1W2AWD8CNhfkNbvf7Ydx/JwxTtwPbVYBNLxlzWqPSV:ll5tW9oW9kNbvGxyptw2h7B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
501cb6153f3e1ed1c0c8cff7d01f26e7

Files

501cb6153f3e1ed1c0c8cff7d01f26e7
.exe windows:6 windows x86 arch:x86

2bed3b575b122ce7042753fe75b3b7d0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
GetModuleFileNameW
SetEnvironmentVariableW
SetEnvironmentVariableA
WideCharToMultiByte
UnmapViewOfFile
lstrcpynW
GetFullPathNameW
GetFullPathNameA
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
GetEnvironmentVariableW
CreateFileA
GetEnvironmentVariableA
GetVersion

user32

MessageBoxA

Sections

.text
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 31KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE