be4a8fb9e5d6979f9cc6795649908c85ee21cc6b268abcd7fd648721f59e65ee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be4a8fb9e5d6979f9cc6795649908c85ee21cc6b268abcd7fd648721f59e65ee
Size

25KB
MD5

fe4bdf54a9512b47486543a7f410e86e
SHA1

7b991a325b783ed501b67cf3c1db84cea26d49b9
SHA256

be4a8fb9e5d6979f9cc6795649908c85ee21cc6b268abcd7fd648721f59e65ee
SHA512

383596d9c17c5808f33eb3ab65d7de6eeaab28b218c5e315ec259baa897701f730eae188506a58348f85d114d2f39b1bb43bb9600d54b9b1f4ef0704ebc15124
SSDEEP

768:MWNckgwKSMEIDeNgr9D3Gbc/6GgIyRwyLNj:xmkc/DeNSQo6GgnmGj

Score

N/A

Malware Config

Signatures

Files

be4a8fb9e5d6979f9cc6795649908c85ee21cc6b268abcd7fd648721f59e65ee
.exe windows x86

77e4611c2b2cbcc0b593168d1cdf1063

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharLowerBuffA

kernel32

CloseHandle
CreateFileA
EnumResourceNamesA
ExitProcess
FindResourceA
GetTempPathA
LoadResource
LockResource
SizeofResource
WriteFile
lstrcatA
lstrcpyA
lstrlenA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE