50988bc616af2f6c950c3b1979214b57

Sharing

Copy URL Twitter E-mail

General

Target

50988bc616af2f6c950c3b1979214b57
Size

80KB
MD5

50988bc616af2f6c950c3b1979214b57
SHA1

87ad5928398d4e9c2118b13e7c06d3f76145cd30
SHA256

d8041c16387be4b592328c9d3f091d6e03a9c6ae725734f31c352a06bab92a04
SHA512

ef7b99a5fa05158291acd5ca04877dcc156e0bdb5416c5a8eaa54f1297b952f56f8432568f4d7ed04532096d9707a35f6cd08f108e9f905e072bd3d9559509a2
SSDEEP

768:pio+hXHEE5pqE1tEAszF2M7t21wAN2SxuXQGZLc+Oqo7SN1ZePYHYVWs7k2:soWkCqE16tI1t2KIROtGZeg4VrX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50988bc616af2f6c950c3b1979214b57

Files

50988bc616af2f6c950c3b1979214b57
.exe windows:4 windows x86 arch:x86

b245c5331c45b57a3d2cbd5b4f255730

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
OpenFileMappingA
CreateThread
GetLastError
GetStdHandle
DeleteAtom
FindAtomA
CopyFileExW
ReadConsoleA
GlobalFree
CreateProcessA
GetComputerNameA
ReadFile
Sleep
CreateProcessA
DeleteFileW
GetLastError
CreateThread
GetFileSize
GetConsoleMode
DeleteFileA
CreateDirectoryA
GetCPInfo
CopyFileW
WriteFile
DeleteAtom
CopyFileA
FindAtomA
GetFileTime
GlobalFree
SetLastError
DeleteFileW
Sleep
OpenFileMappingA
ExitThread
GlobalFree
GetLastError
CopyFileExA
GetCommandLineA
GetConsoleMode
ReadFile
WriteFile
CreateDirectoryA
GetStdHandle
CopyFileExW
GetComputerNameA
CopyFileA
GetCPInfo

advapi32

RegDeleteValueA
RegGetKeySecurity
RegOpenKeyW
RegQueryInfoKeyA
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW
RegOpenKeyExA
RegEnumKeyW
RegQueryValueA
RegQueryInfoKeyA
RegEnumKeyW
RegOpenKeyW
RegDeleteValueW
RegOpenKeyExW
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyA
RegReplaceKeyA
RegLoadKeyW
RegQueryValueA
RegCreateKeyW
RegFlushKey
RegReplaceKeyW
RegQueryInfoKeyW
RegEnumKeyA
RegEnumValueW

user32

LoadMenuA
GetDC
AppendMenuA
GetDlgItem
CopyImage
IsWindow
IsMenu
DialogBoxParamW
GetFocus
AlignRects
DrawIcon

Sections

CODE
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.qgdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 4KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b245c5331c45b57a3d2cbd5b4f255730

Headers

File Characteristics

Imports

kernel32

advapi32

user32

Sections

CODE Size: 4KB - Virtual size: 2KB

.qgdata Size: 52KB - Virtual size: 49KB

.tls Size: 4KB - Virtual size: 4KB

.rdata Size: 8KB - Virtual size: 6KB

.idata Size: 4KB - Virtual size: 2KB

.edata Size: 4KB - Virtual size: 29KB

CODE
Size: 4KB - Virtual size: 2KB

.qgdata
Size: 52KB - Virtual size: 49KB

.tls
Size: 4KB - Virtual size: 4KB

.rdata
Size: 8KB - Virtual size: 6KB

.idata
Size: 4KB - Virtual size: 2KB

.edata
Size: 4KB - Virtual size: 29KB