50e9cd93c34f7c0aa3f2671dc0270019 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50e9cd93c34f7c0aa3f2671dc0270019
Size

332KB
MD5

50e9cd93c34f7c0aa3f2671dc0270019
SHA1

abba057f7129440c4c30341287bfa0a5f9c544f6
SHA256

f37b28df1e7d50bfc0bfec9ab45a36906d556c5f1bc5731ab3e732fab627c5dd
SHA512

90bb174e04ac8ac54f98a1c1869b6b5697442f9c449f0663d64a3ec227f7c52ec3051f17e08ae0586307fea829ba4b72600c2c35982264633bc8a93c6568a846
SSDEEP

6144:XOKrVsUK79hpwI8lrTTgBMRTHnoH2gMnFnT7yuLewuHjU1cp:e+s/SxSernNgmhT7fepfp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50e9cd93c34f7c0aa3f2671dc0270019

Files

50e9cd93c34f7c0aa3f2671dc0270019
.exe windows:4 windows x86 arch:x86

27718b9263f503dc455201606adcef90

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetProcAddress
GetModuleHandleA
Sleep
ExitProcess
CreateProcessA
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
LCMapStringA
LCMapStringW

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 304KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ