50d73b0ab30e1440d4f7a6ed7426e368 | Triage

Sharing

General

Target

50d73b0ab30e1440d4f7a6ed7426e368
Size

104KB
MD5

50d73b0ab30e1440d4f7a6ed7426e368
SHA1

953a8bff3895a1d023ad3e429b71ee407c177bbb
SHA256

77f8fb44c09f61d2ca52b2fbc5d25a7197d241c67a7e97a5cf6e2bf8ac71b31a
SHA512

188bea04167d43fa5de4b241a845eb1d1ff205ebb472b0da077d32e7a254acc2fad262670d177108bd9a77b0b907c4779b0aae0121d05bd279f8576ae8b8087b
SSDEEP

1536:kJGgaEpc8koM6w0uIfN6ATUPSy2LFq8TspbtqLdXNK/CvhI/Z0L7e7v:kEgaQc1o3w0qxPSyfVpqLdX8KZIx0E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50d73b0ab30e1440d4f7a6ed7426e368

Files

50d73b0ab30e1440d4f7a6ed7426e368
.exe windows:4 windows x86 arch:x86

7aba6110d0b2fbab69f5445674eff8a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
GetVersion
LoadLibraryA
VirtualProtect
lstrcmpiA

Sections

.text
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 87KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ