50978e4b98897e433cc642659817904a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50978e4b98897e433cc642659817904a
Size

1.6MB
MD5

50978e4b98897e433cc642659817904a
SHA1

1c20ea093f72d131ad56658c1a2cf75fd6f7222c
SHA256

1f4b6501cf0194d64d5f44671700be1492428dd84aa18c990ec6cee52daf00da
SHA512

cd250e74a15852a70474b749e81e518f4894c1c1016f15aa25735ab7ea5e263719170055fe4f832e732780559c9f5449d60b2750bec72dcb86c3b456acc93877
SSDEEP

24576:Bh15rlDA/dmdzKjks0ks2y8jE7Jbj4RTQlumiCYZL//4pJmaryMN6Z7lY5S:H9NKNUJYRaLuh4HN6Z7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50978e4b98897e433cc642659817904a

Files

50978e4b98897e433cc642659817904a
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 272KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ