b50d06fdc5a763244d12f5d2e7c1ee3c[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
b50d06fdc5a763244d12f5d2e7c1ee3c.exe
Size 5.9MB
Sample241227-jgem1ssret
SHA256 80a8fee2e4d5909bf2dbe60be97d7ea44bbc5d9e3745caf83a06653287ea229c
MD5 b50d06fdc5a763244d12f5d2e7c1ee3c
SHA1 3c809781c51c973199894746f7dab09ca9c6a416
SHA512 eb52ddb0c3d66bfae4e48b96d97c2f95eebbc9e4832952fbd52926d73af29dab3766231fd03946ffb6f348c7d3f9dfe3b09754c038a48e6358d8cba689a0ea64
SSDEEP 98304:LkkKwG21Ovtlc2jHCyHPmfttKL8K1mTMKd3VU0rfBKUmlShrxlxrWVpcb:LPKbHlc22yvmVtkx1nC1UVlSlxrWs
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b50d06fdc5a763244d12f5d2e7c1ee3c.exe

File Explorer

b50d06fdc5a763244d12f5d2e7c1ee3c.exe

.exe 5.9MB

b50d06fdc5a763244d12f5d2e7c1ee3c.exe

IMPHASH 2eabe9054cad5152567f0699947a2c5b
SHA256 80a8fee2e4d5909bf2dbe60be97d7ea44bbc5d9e3745caf83a06653287ea229c
MD5 b50d06fdc5a763244d12f5d2e7c1ee3c
SHA1 3c809781c51c973199894746f7dab09ca9c6a416
SHA512 eb52ddb0c3d66bfae4e48b96d97c2f95eebbc9e4832952fbd52926d73af29dab3766231fd03946ffb6f348c7d3f9dfe3b09754c038a48e6358d8cba689a0ea64
SSDEEP 98304:LkkKwG21Ovtlc2jHCyHPmfttKL8K1mTMKd3VU0rfBKUmlShrxlxrWVpcb:LPKbHlc22yvmVtkx1nC1UVlSlxrWs
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11722752

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

4.2MB

Virtual Size

6.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

upduborm

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

fwbmyxqy

Size

1KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.taggant

Size

8KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

b50d06fdc5a763244d12f5d2e7c1ee3c.exe

kernel32

generic