50f9f868c3ddfe1e9ab726c7ed9b957d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50f9f868c3ddfe1e9ab726c7ed9b957d
Size

132KB
MD5

50f9f868c3ddfe1e9ab726c7ed9b957d
SHA1

0dbf5bf500feb36976f191f9c4794b0b63c595e9
SHA256

79f646a8700156c8c8a55c1706e8ca202051e7eaed51d829ee5bb310b7ca9ad0
SHA512

aaf9b0805437918cee774c0f8385c0955796f24d706d6962947172fb130c0918f69b8920d4259af00e9be49b1a99c88443c92dcb23f203638843eddfc3f401fd
SSDEEP

3072:57gi2ua99xwVzaa4oevtbf/E7mzXoTPb9HWp4gYWyWKBUbUUbzUbv:Rlve1bfc7mzXcJfgYNWK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50f9f868c3ddfe1e9ab726c7ed9b957d

Files

50f9f868c3ddfe1e9ab726c7ed9b957d
.exe windows:4 windows x86 arch:x86

46b0675c1fd7681c7b19a1c83d5aff83

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 114KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ