50a8aa3d092c3255810f0b8ce065a981 | Triage

Sharing

General

Target

50a8aa3d092c3255810f0b8ce065a981
Size

15KB
MD5

50a8aa3d092c3255810f0b8ce065a981
SHA1

0d02061fc4ddcaca8ba4edabad10ed8d1e7c3472
SHA256

de9ceacdd03547b72659e3495d02c7fbbe8c6b80afe0e22ef7e41acc6c27aaa3
SHA512

a4286d0c6db10131fc148395adb6bbb46a788a9d69249b5d27f9028ffb4b3d67ed5f76d62cc1c06ac7980b303c8bc64c8282e1e6d8a9d845bd6fcc62602ae8cd
SSDEEP

192:eHQ3+zbhFlR7e6pDfgbAGDgrhuVnoNeXLBc2Q+u06uclO3eSJGW9wnEE3e/:eHy+zbdRRDfUsrfeXLbu05co3uVnTO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50a8aa3d092c3255810f0b8ce065a981

Files

50a8aa3d092c3255810f0b8ce065a981
.dll windows:4 windows x86 arch:x86

43eecaea1f626a218627a9cba0315a3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualProtect
VirtualAlloc

user32

FindWindowA

Sections

.text
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ