50d301a5c4991874ebe778546b20cbb0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50d301a5c4991874ebe778546b20cbb0
Size

6KB
MD5

50d301a5c4991874ebe778546b20cbb0
SHA1

d4262a23343715e85ab43eb17e259bdd6d9a8a56
SHA256

d93f9831d328eb826e24210b7085c56a61a4d28a8e964e5c90ebd71ca9acc4d3
SHA512

e11ede8639d78d37f3bbd5ac4540e2e287e7c180bd46358ef8e713a448cddd34a6d85a90649c0b1861df2b2bd9d78ef9436c745bb5ba74517d070cc1622d1abe
SSDEEP

96:AtiVCiomSTCBKW4rM3fFKdja913cCyPs50d87/K4hdBYT0/:Avd3rGfFKdKRWPa0d877BYT0/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50d301a5c4991874ebe778546b20cbb0

Files

50d301a5c4991874ebe778546b20cbb0
.exe windows:4 windows x86 arch:x86

fc20975f80aa9434c70eac375ffcbc6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
CloseHandle
lstrcpyA
lstrcatA
GetProcessHeap
WaitForSingleObject
ExitProcess
GetModuleHandleA
GetProcAddress
CreateEventA
LoadLibraryA
Process32First
CreateToolhelp32Snapshot
CompareStringA
RtlUnwind

user32

GetDesktopWindow

advapi32

RegCloseKey

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 874B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE