50a0baa68bc80a580685d53ecbba84cc | Triage

Sharing

General

Target

50a0baa68bc80a580685d53ecbba84cc
Size

183KB
MD5

50a0baa68bc80a580685d53ecbba84cc
SHA1

9db2baac6beef5298f581423772b08d2354681cc
SHA256

9a57aa5f609b461f32ea4adfe826fceb88bdab12c4e16d40934e726a41dd8358
SHA512

aaa0ce66f89d6b533914f04319217a0c2de1bb1ffa85b2944aefaa098b18c782996374402a4df41d1d39328472f177379dbb11116d3cc86bd2fa3cf1e01adb4a
SSDEEP

3072:6ErBpV1KyZY0CFEKQXRIq+XWzONcXq8DdofYRxYv0sSpMU4HBCp:ZV1KyZYDFEKXqczNcXqhSh4H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50a0baa68bc80a580685d53ecbba84cc

Files

50a0baa68bc80a580685d53ecbba84cc
.exe windows:5 windows x86 arch:x86

ef3a0c6b6b4f845864cd9e2b781d9c93

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
AddAtomA
ExitProcess
ReadFile
SetErrorMode
GetProcAddress
GetModuleHandleA
HeapReAlloc
HeapAlloc
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

FzSPmHgA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

NcUEmpJm
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ