50dc4263f4b99b452d70aba39f86e2c50cb11c0948488b001aefe61dc7069593

Sharing

Copy URL Twitter E-mail

General

Target

50dc4263f4b99b452d70aba39f86e2c50cb11c0948488b001aefe61dc7069593
Size

1.0MB
MD5

8862af832648036583401dc684dfb37e
SHA1

303a5bb159021e54fac7ede1951ee77d3506cf7e
SHA256

50dc4263f4b99b452d70aba39f86e2c50cb11c0948488b001aefe61dc7069593
SHA512

78df17ff6609053ecec51cad8035c4ea767dcb1339c77029f689e2177cdc6ae7441c92146adbacea3904b8e66610629292d35e803ad044b8486d337560cdfb46
SSDEEP

24576:e2c6WRTUUt+HxHGRivPX04OhWqVD6wKhGm31m:nW5tQHlvv0f5B6Vhv31

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50dc4263f4b99b452d70aba39f86e2c50cb11c0948488b001aefe61dc7069593

Files

50dc4263f4b99b452d70aba39f86e2c50cb11c0948488b001aefe61dc7069593
.dll windows:6 windows x86 arch:x86

da6b61b1044c1468d1deb0c4944ee99d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\12-Early\went\Whether\View\Stop.pdb

Imports

kernel32

GetModuleFileNameA
VirtualProtect
GetEnvironmentVariableA
GetSystemDirectoryA
FindFirstChangeNotificationA
SetConsoleOutputCP
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
EncodePointer
FreeLibrary
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
HeapValidate
GetSystemInfo
GetStdHandle
GetFileType
WriteFile
OutputDebugStringA
OutputDebugStringW
WriteConsoleW
CloseHandle
WaitForSingleObjectEx
CreateThread
SetConsoleCtrlHandler
GetCurrentThread
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetProcessHeap
HeapFree
HeapReAlloc
HeapSize
HeapQueryInformation
GetStringTypeW
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CreateFileW

Exports

Exports

Ledblock
Thousandwire
Weight

Sections

.text
Size: 553KB - Virtual size: 553KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 459KB - Virtual size: 459KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

da6b61b1044c1468d1deb0c4944ee99d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

Exports

Exports

Sections

.text Size: 553KB - Virtual size: 553KB

.rdata Size: 459KB - Virtual size: 459KB

.data Size: 3KB - Virtual size: 91KB

.reloc Size: 19KB - Virtual size: 19KB

.text
Size: 553KB - Virtual size: 553KB

.rdata
Size: 459KB - Virtual size: 459KB

.data
Size: 3KB - Virtual size: 91KB

.reloc
Size: 19KB - Virtual size: 19KB