b50241e3648c3ce6d428e157e10885db | Triage

Sharing

General

Target

b50241e3648c3ce6d428e157e10885db
Size

62KB
MD5

b50241e3648c3ce6d428e157e10885db
SHA1

66ef29f39eff7d3dc1da3ebacd44949c254e040b
SHA256

b859f49bbc4bf075c4fdb9550baffddc8dfdc15951a592e8b3aa7ad3541f891b
SHA512

f0c2d4d0d70fb1c52fad85dca0c38b23f765a1f6d9f0d224a616c44605ba34335fc57a52bd41e66ad8c419d208bf20abd0f04c65f5d7dd5acbadafc74bb07116
SSDEEP

1536:g2NNyGkHjkDzELu+inOUDT45xnetaf+TUh5MywbgTeCmKXa5FC:guAGWIz88nOUDT45he/T8MPueCw5FC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b50241e3648c3ce6d428e157e10885db

Files

b50241e3648c3ce6d428e157e10885db
.dll windows:4 windows x86 arch:x86

b09e9d40faacccc80f5064ec04df674b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

_vsnprintf

gdi32

GetDeviceCaps

user32

GetWindowRect

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 15KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE