50dd25e99aeb50e63fc64670e908be96630bddd76be018700d47ccfa140af11b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50dd25e99aeb50e63fc64670e908be96630bddd76be018700d47ccfa140af11b
Size

49KB
MD5

54a319779b2dcafb39d00c15d63d9acb
SHA1

6cb3477e9e9cedb97d7347dc7e8528cfbf80c998
SHA256

50dd25e99aeb50e63fc64670e908be96630bddd76be018700d47ccfa140af11b
SHA512

fab7d2fbddad07816d707573dfecd3b71f85d4a25c00ef00c0cdfe745cb5431ab8d55027406a773bf2ad81d1be9aa5cf7a009cf8f6fc08f18e2a8a3e1a27a4d8
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIS:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50dd25e99aeb50e63fc64670e908be96630bddd76be018700d47ccfa140af11b

Files

50dd25e99aeb50e63fc64670e908be96630bddd76be018700d47ccfa140af11b
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE