4f50330982c15e843426b0206bd61e55 | Triage

Sharing

General

Target

4f50330982c15e843426b0206bd61e55
Size

66KB
MD5

4f50330982c15e843426b0206bd61e55
SHA1

f80777fa8145f9ac691b888851a42c28730dd4fb
SHA256

54b8bf481f0897d4d92f50bd5acc1a1f9dfe55a9014421b86663db86d575ef08
SHA512

1249a1dc3ac6c3289e8d6215cedb397ce0f9f1f735ec66dc60edc8ca5ee602f0aa84314463b5728dab135f236abee3ca0d5024dd7c1e3a0c893e553fd574cfd8
SSDEEP

1536:HxZgSzNdECAspUFDXTKN26tY6w1t2UxR7LR6zMOqJxxVfBd:qCJCDKXfw1oU3RyG1fL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f50330982c15e843426b0206bd61e55

Files

4f50330982c15e843426b0206bd61e55
.exe windows:4 windows x86 arch:x86

2da3b22161193accd14717a633a015a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasExesLengthA
GlobalSize
FindFirstVolumeA
FindNextFileW
RegisterWowExec
SetFileApisToANSI
IsBadWritePtr
SwitchToThread
GlobalFindAtomA
FreeLibraryAndExitThread
GetConsoleAliasA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE