50a456af5652c967f961a64cf3575cea | Triage

Sharing

General

Target

50a456af5652c967f961a64cf3575cea
Size

212KB
MD5

50a456af5652c967f961a64cf3575cea
SHA1

4d04414c7a3aa8ed11914983b9db386a784cb286
SHA256

e5e6dda576bbe9d03c05cef4f9858a772dd7fb183d62720ad694397ec33176eb
SHA512

217b2642f9d5d8a5af818c9d1e5805ba439c8ddeef467152ed99c5d62548fe5f229713842d3c72ea417c4f9cc58baac9368995ac0f2c6bec49280c8012904504
SSDEEP

3072:13TzXu32JVDHa94mHkIu8aauuuoQOzaKZEUHCRix3qO43F/oNO:13PXu3WITV9aaE0aKZhrxm/oNO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50a456af5652c967f961a64cf3575cea

Files

50a456af5652c967f961a64cf3575cea
.exe windows:4 windows x86 arch:x86

a921e21ef63849670f2374f58e61e721

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
LoadResource
GlobalFree
WriteProfileStringA
CloseHandle
IsBadCodePtr
DeleteAtom
EnterCriticalSection
GlobalAddAtomA
HeapCreate
GlobalUnlock
LocalFree
LoadLibraryExA
RaiseException
GetStdHandle
GlobalAddAtomA
FreeConsole
SetConsolePalette
GetOEMCP
GetLastError
lstrcat

user32

BeginPaint
GetClassInfoExA
GetActiveWindow
GetWindow
AlignRects
GetWindowTextLengthA
DrawEdge
GetWindowTextA
GetDC
GetFocus
EndPaint
ReleaseDC
GetForegroundWindow
ValidateRect
GetClassNameA
GetParent
IsIconic
ShowWindow
CloseWindow

mprapi

MprAdminUserOpen
MprAdminUserClose
MprAdminUserGetInfo
MprAdminUserWrite
MprAdminUserRead

linkinfo

CreateLinkInfoA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ