50dbffe2b0d5c1554b2db36c6c89cf05 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50dbffe2b0d5c1554b2db36c6c89cf05
Size

95KB
MD5

50dbffe2b0d5c1554b2db36c6c89cf05
SHA1

fe2aa1b35fd0afef2ec5fc60da8024a9ba511a68
SHA256

a5690c6eb2ec4426300e0c603ea4946b7063aa839cbbe0685781e7333977c4c0
SHA512

1bde5beaddc4b8ada25ee3580d3db184293d3b083acf872cc2a947db77b43bd74f4cce28dd50d682714aa0b57e84e00e838e99630c7906cf5637e1867534c4f2
SSDEEP

1536:OHvC4SnkPe7HWBk5/tXQAt3ErqUs454zPWSfrPw3ATeoOQzMgzm:SaYKH2k5lg8ErqUN54XwwTeAzTzm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50dbffe2b0d5c1554b2db36c6c89cf05

Files

50dbffe2b0d5c1554b2db36c6c89cf05
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

hutdownriv
DzService
ServiceMain

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ