50742f51cac1ba6a2fd0e18bc2fd506a | Triage

Sharing

General

Target

50742f51cac1ba6a2fd0e18bc2fd506a
Size

4KB
MD5

50742f51cac1ba6a2fd0e18bc2fd506a
SHA1

ec386ef418ecd00fbf75cc8e7b3e2e43b7623635
SHA256

d4593f7b8b5b5fdace749145b6f6a57a685d0cc596b3cf21d8f0e278110c5097
SHA512

64ebded303e85151c0a9ddd2869031210d1516848137dd35ef8e8b75f6e9857403b04c6b14650f8c1d36df75a8e228bb98a25a6ed1e6c33693810fe31135a604
SSDEEP

48:6YQOFyb1ia02HqxSnBgBwQGeEhvere9lk5hnFG1VPjMZOXrksPEPwjZ3X2pRJPBh:BI7BH9leSDkDE1Hbk+F3GZ49SlCBb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50742f51cac1ba6a2fd0e18bc2fd506a

Files

50742f51cac1ba6a2fd0e18bc2fd506a
.exe windows:4 windows x86 arch:x86

37b776557969363460bffaa169de85f1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateFileA
GetFileSize
SetFilePointer
lstrlenA
lstrcpynA
FreeLibrary
HeapAlloc
HeapFree
GetProcessHeap
Sleep
CreateProcessA
ReadFile
GetSystemDirectoryA
lstrcatA
GetShortPathNameA
GetStartupInfoA
FindFirstFileA
GetLastError
lstrcmpiA
GetProcAddress
GetTempFileNameA
LoadLibraryA
GetModuleFileNameA
CreateMutexA
CloseHandle
GetTempPathA
DeleteFileA

user32

wsprintfA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE