50f1dc5f16ee91585981b3b5426340f0

General

Target

50f1dc5f16ee91585981b3b5426340f0
Size

113KB
MD5

50f1dc5f16ee91585981b3b5426340f0
SHA1

b3b5ff4be0f250ca677e9c25e72115fd8a99e269
SHA256

c181c20382a42ceb97ec36583d530465c1d3904a3d5fd9ac3e7f8fc2d7e94966
SHA512

be0c9217856cc7fc70a02adfe64493f547bdb89d06b53798fb5b2c69ee30b79f93eb10d67a3c147c77dc5dc5b2ffdd66db7dc4ac51ec4022d2c79acffeceb144
SSDEEP

3072:eZdLKTuvc7zcCHmHqi8fUnaJ7r57NNKj:e7rscb2UnQ7r57/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50f1dc5f16ee91585981b3b5426340f0

Files

50f1dc5f16ee91585981b3b5426340f0
.exe windows:4 windows x86 arch:x86

971d21f328311a5640ef3f8486d6eb20

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

LineTo
RectVisible
SelectPalette
CreateSolidBrush
DeleteDC
DeleteObject
GetTextMetricsA
SetTextColor
CreatePalette
CreateFontIndirectA
SetMapMode
SaveDC
GetStockObject
SetStretchBltMode
GetDeviceCaps
GetObjectA
CreatePen
GetPixel
RestoreDC
CreateCompatibleDC
SelectObject
GetClipBox
SetTextAlign
SetPixel
PatBlt

user32

GetDesktopWindow
GetSystemMetrics
TranslateMessage
GetParent
CharNextA

kernel32

GetModuleHandleW
DeleteFileW
DeleteFileA
MulDiv
GetOEMCP
lstrlenA
GetACP
GetProcessHeap
lstrcmpA
GetCurrentProcess
GetCurrentThread
GlobalFindAtomW
GetUserDefaultLangID
GetCurrentProcessId
GetStartupInfoA
SetCurrentDirectoryA
lstrcmpiA
GetDriveTypeA
lstrlenW
RemoveDirectoryA
GetTickCount
GetVersion
GetConsoleOutputCP
GetCommandLineA
GetModuleHandleA
GlobalFindAtomA
GetCurrentThreadId
QueryPerformanceCounter
GetCommandLineW
IsDebuggerPresent
GetThreadLocale
lstrcmpiW
VirtualAlloc
VirtualFree
RemoveDirectoryW
GetWindowsDirectoryA

glu32

gluQuadricCallback

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

971d21f328311a5640ef3f8486d6eb20

Headers

File Characteristics

Imports

gdi32

user32

kernel32

glu32

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 79KB - Virtual size: 79KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 79KB - Virtual size: 79KB

.rsrc
Size: 12KB - Virtual size: 12KB