50dca038c2306d0d7cc9833216461f979be25421cb67c7b033c30e33ba4b432a

General

Target

50dca038c2306d0d7cc9833216461f979be25421cb67c7b033c30e33ba4b432a
Size

6.6MB
MD5

2b02d485faf03c7abaa2cac243000f60
SHA1

26d869f8d4c6532aa52ca38d5c707bf3d443329a
SHA256

50dca038c2306d0d7cc9833216461f979be25421cb67c7b033c30e33ba4b432a
SHA512

9c13a300b647502045cb1e5d373549d6ece4fbfa48e30025fbebc3b404a39f347a7959d658e8244a4762bdd6b5ee11790eb12a044433d8bbeadb919fc385d206
SSDEEP

196608:lh2IJCW5mcHtwtwqs3U2EncGc1SHTNLO33BXfaJfxAn:lhxJCs5qqEnbc1SzJI3hfaQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50dca038c2306d0d7cc9833216461f979be25421cb67c7b033c30e33ba4b432a

Files

50dca038c2306d0d7cc9833216461f979be25421cb67c7b033c30e33ba4b432a
.exe windows:4 windows x86 arch:x86

d247a55625cd61e3f91a266bce0cd371

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
GetModuleFileNameA
GetStdHandle
Sleep
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleTextAttribute
GetTickCount
GetConsoleMode
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
GetLastError
GetFileAttributesA
HeapFree
CloseHandle
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoA
WriteFile
ReadFile
GetProcAddress
GetModuleHandleA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
LCMapStringA
LCMapStringW
WriteConsoleA
ReadConsoleInputA
SetConsoleMode

winmm

timeGetTime

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d247a55625cd61e3f91a266bce0cd371

Headers

File Characteristics

Imports

kernel32

winmm

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 11.0MB

.rsrc Size: 4KB - Virtual size: 16B

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 11.0MB

.rsrc
Size: 4KB - Virtual size: 16B