beba6c53ad085a6c69c5b0a95b5ff0376ee7a23e6091a11d4c731e7e8fb07af9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

beba6c53ad085a6c69c5b0a95b5ff0376ee7a23e6091a11d4c731e7e8fb07af9
Size

728KB
MD5

0eb8ba939152778e5a21eafbed2546fb
SHA1

ad456d31e8efe2ddbdc27f2e9faa20bd82a64d9e
SHA256

beba6c53ad085a6c69c5b0a95b5ff0376ee7a23e6091a11d4c731e7e8fb07af9
SHA512

24d29201ea3a22775c079a6a87a3faad45b5ca963be78a32bc06b50f01049eb84b0eaef39dfd0f0ef4e99151e9c224264cbdc66794dccbd830416bd2aed6089c
SSDEEP

12288:EH5l7ocuQ11shcigKhvbBiwka+Av7vjdnMPXw1M0qrkPY1Ik+IQpiLagYtsiQ:85l7+61shjBhvtiwk5C7N4kPYqk+viLb

Score

N/A

Malware Config

Signatures

Files

beba6c53ad085a6c69c5b0a95b5ff0376ee7a23e6091a11d4c731e7e8fb07af9
.exe windows x86

b21cdd0db0884e9d970fe92330b4b9f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
LockResource
LoadResource
SizeofResource
FindResourceA
CreateProcessA
GetProcAddress
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
LCMapStringA
LCMapStringW

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 700KB - Virtual size: 697KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ