50923c68023282f3d9ee4a33c1bd59492e0e81c523a19cf192268bc1d7473575 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50923c68023282f3d9ee4a33c1bd59492e0e81c523a19cf192268bc1d7473575
Size

670KB
MD5

adefdca30316b678346efb7b552823a3
SHA1

d1da496623d54b1f3767e0c7c63b8e3f0cae9a2d
SHA256

50923c68023282f3d9ee4a33c1bd59492e0e81c523a19cf192268bc1d7473575
SHA512

e5fa9fd4b1bbc1fea233c5de7ab0a00ff66ee2d241bd2b9544dc01488fd4e42ab4b6a3b04ec37d4ff4ddb08576af9e432456c0ab20be1f7aec1ac4c0c8584c10
SSDEEP

12288:Uhhlv312Z3ferO+5PrVI/pRwsLEzXWYlyFiCJ958JSPn8JGIqKe6:UXJ312ZfyO+ZZIhozXWCzCJ9aJSPn8Jz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50923c68023282f3d9ee4a33c1bd59492e0e81c523a19cf192268bc1d7473575

Files

50923c68023282f3d9ee4a33c1bd59492e0e81c523a19cf192268bc1d7473575
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

CgzUw.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 667KB - Virtual size: 667KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ