50567e1ee2380a69347142d45ba5ceb5

Sharing

Copy URL Twitter E-mail

General

Target

50567e1ee2380a69347142d45ba5ceb5
Size

90KB
MD5

50567e1ee2380a69347142d45ba5ceb5
SHA1

b29b08cf1245027605709ff4b343476ac8f117f8
SHA256

a43c71fd24a0d7565fdc680ecd991df1cdc4007499d0ca31bd56100a0b73bfda
SHA512

322c2649f5580ad0805faf8a59e1c55fa2342d901231c2f1cdbe3dfc9007df3e216202ea8ac0ce68ad40225390a5091723c47d6408f6b1827a14b23800d954ba
SSDEEP

1536:94LYLyIJEE9AYYP87gfv5ZWwTQ35q4NeIm+03ZaDOE2uR5mNCs7PU+04LvPXoj:9OI2mbB0fvuEQ35q4Ne6DKdrREj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50567e1ee2380a69347142d45ba5ceb5

Files

50567e1ee2380a69347142d45ba5ceb5
.dll windows:4 windows x86 arch:x86

95426cd6c35a2aebc4b7399e1f909df7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FreeLibrary
GetCommandLineA
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
lstrcpyn
lstrlen
MultiByteToWideChar
OpenMutexA
OpenProcess
ResumeThread
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
WriteFile

user32

BeginPaint
DestroyCursor
DestroyWindow
EndPaint
ExitWindowsEx
FindWindowExA
GetCapture
GetCursorPos
GetDesktopWindow

gdi32

CombineRgn
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
DeleteObject
GetDeviceCaps
GetPixel
GetStockObject
MoveToEx
Rectangle
RestoreDC
SaveDC
SelectObject
SetBkColor
SetBkMode
SetBrushOrgEx
SetPixel
SetPixel
SetStretchBltMode
SetTextColor
SetWindowOrgEx
StretchBlt
TextOutA

shell32

DllRegisterServer
DllUnregisterServer
DragAcceptFiles
DragFinish
DragQueryFile
DragQueryPoint
Shell_NotifyIcon
ShellExecuteA
SHGetPathFromIDList

comdlg32

ChooseColorA
ChooseFontA
GetSaveFileNameA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CRT
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 33KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

95426cd6c35a2aebc4b7399e1f909df7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

Sections

.text Size: 8KB - Virtual size: 8KB

.reloc Size: 2KB - Virtual size: 4KB

DATA Size: 12KB - Virtual size: 12KB

.rsrc Size: 3KB - Virtual size: 4KB

CRT Size: 13KB - Virtual size: 16KB

DATA Size: 5KB - Virtual size: 8KB

.code Size: 5KB - Virtual size: 8KB

.code Size: 33KB - Virtual size: 88KB

.text
Size: 8KB - Virtual size: 8KB

.reloc
Size: 2KB - Virtual size: 4KB

DATA
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 3KB - Virtual size: 4KB

CRT
Size: 13KB - Virtual size: 16KB

DATA
Size: 5KB - Virtual size: 8KB

.code
Size: 5KB - Virtual size: 8KB

.code
Size: 33KB - Virtual size: 88KB