a50199c6e4ad3278fb7031e0fe1bcf949c920b210a3f8e69f06409c1fe2a9d9d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a50199c6e4ad3278fb7031e0fe1bcf949c920b210a3f8e69f06409c1fe2a9d9d
Size

4.1MB
MD5

6b550d5a2a4fd446e9684c43b90852a1
SHA1

4b21982e2876188c9dd48fe2d10d3f2319985aa4
SHA256

a50199c6e4ad3278fb7031e0fe1bcf949c920b210a3f8e69f06409c1fe2a9d9d
SHA512

0c1d9abaf8fc9390bd9d71a4c15502c4278b209e85eb15d9955fea4036e4f1cb7b0aaa4c3d35cb6a124c211d33a44a23d799b092bf2ab8eca362deb87a60895e
SSDEEP

98304:WcSIXSPo2fJ73WCZkSSHWQk6J+n9wNCzbzBGQB+YMa54N:WcSIXSPo2RbWCZLSHJgn9wGbzBt+R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a50199c6e4ad3278fb7031e0fe1bcf949c920b210a3f8e69f06409c1fe2a9d9d

Files

a50199c6e4ad3278fb7031e0fe1bcf949c920b210a3f8e69f06409c1fe2a9d9d
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

AmdPowerXpressRequestHighPerformance
NvOptimusEnablement

Sections

.textbss
Size: - Virtual size: 9.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 771B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 135B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ