50de6b17e0eefe7937df6cb7cfd120b9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50de6b17e0eefe7937df6cb7cfd120b9
Size

8KB
MD5

50de6b17e0eefe7937df6cb7cfd120b9
SHA1

b66c48f846c871bce263387b333ad8193169796b
SHA256

28869c72b345a876873dbae6d26f7ba930dd0479ee83ec9453bcef8b66f12f0e
SHA512

48208f4ee8eaafb5bbef70430bf6abb3ae7e068a12f970d4fe436c4ac26a2fdae6874f5e5e87573efd33c4dfa62b6cb011a8de175aaed9e8397048277c76bcd8
SSDEEP

192:rQOs7Y/Gu4BhkRH6OnjWHy6vwZYZ0kJ8J7Te:rQOs7Y/Gu4I3njbGD78J7y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50de6b17e0eefe7937df6cb7cfd120b9

Files

50de6b17e0eefe7937df6cb7cfd120b9
.exe windows:4 windows x86 arch:x86

455afebaeecf861e936fcbcb43d45c23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
strstr
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strcat
??2@YAPAXI@Z
strcpy
strlen
??3@YAXPAX@Z
rand
sprintf
_strupr

kernel32

GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
CreateThread
MoveFileExA
CopyFileA
ExpandEnvironmentStringsA
CreateFileA
WriteFile
DeleteFileA
CreateToolhelp32Snapshot
Process32First
Process32Next
OpenProcess
TerminateProcess
CloseHandle
Sleep
GetCurrentProcess

user32

FindWindowA
FindWindowExA
ShowWindow
SendMessageA
wsprintfA

advapi32

LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges

shell32

ShellExecuteA

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE