50b9077a784ca707b6331ee840aeaaf4 | Triage

Sharing

General

Target

50b9077a784ca707b6331ee840aeaaf4
Size

142KB
MD5

50b9077a784ca707b6331ee840aeaaf4
SHA1

beae64c938ac142067948b1d9c3130a3451cad13
SHA256

8768dc6714fc1feb35e52a1e75e3afdec48b4e180fe4bc6557c34075c9786e39
SHA512

a967765bc4a48b3bf0d3a360bd6d2b4004030baffc3ea48cd778e4941bb8504d403898e731d0198c31baff5eca63e06b408e15cf86dfdf6d31d13b4b551979e3
SSDEEP

3072:2iNrXGwpJFYlyFTXSgVa19l6KNLg4IxsuPbzzd+:Vh2wtmfgoF68g4YsuP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50b9077a784ca707b6331ee840aeaaf4

Files

50b9077a784ca707b6331ee840aeaaf4
.exe windows:4 windows x86 arch:x86

c9b791c559b226f32c81608cf75101fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

TerminateThread
GetCurrentProcessId
GlobalDeleteAtom
TerminateProcess
EnumResourceNamesA
GetCurrentProcess
GetCurrentThreadId
GetTickCount
GetSystemTimeAsFileTime
ExitProcess
UnhandledExceptionFilter

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ