50061deeb886d4f3c3afa6882c624050N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50061deeb886d4f3c3afa6882c624050N.exe
Size

1.9MB
MD5

50061deeb886d4f3c3afa6882c624050
SHA1

6950d2261e870a42fd27568e0ad4090c98714fc3
SHA256

3500f60d3c7af1324e9bcf9e6f7f0ef3f9c7e87a503e8162eefa4df7ec3fded5
SHA512

7e5a009b708cebe89e13f8cf98a30ffb9a6ab8b099cd4e1fa22b1686c239a6b0e056fa8a8289eccc8167da2168656fa4e7d6f1d5afb3431f05718df12c1ddadd
SSDEEP

24576:2hH42daDD0eqcEK33FGVZhJwmIhJHZrHZcafuAA2Ofst/sp97Nk8:2hODI6jFGV3+miPdmAWst/spJNk8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50061deeb886d4f3c3afa6882c624050N.exe

Files

50061deeb886d4f3c3afa6882c624050N.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 504KB - Virtual size: 504KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ