bef6c5ce68b4968bb19d3c817973d7714385eb397b870c2f9bd2a9cebcd7d784 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bef6c5ce68b4968bb19d3c817973d7714385eb397b870c2f9bd2a9cebcd7d784
Size

817KB
MD5

d38ed6a2ac75c8f4b6da9885cb1ffd2c
SHA1

de4833034517fd26c545bea4cd0039192fe2ba01
SHA256

bef6c5ce68b4968bb19d3c817973d7714385eb397b870c2f9bd2a9cebcd7d784
SHA512

450a2ef6647fe0a62b6bf7a6b2c26521620189b8372cfae08efedf9ae1224319a133f9bce604bd43e188115555ed60f92082bfa2d3a8a1c757e0d7fbb7ab8ddb
SSDEEP

24576:g+wUi776vyPereUX07Y5AQoEmUv5otF+7pc9P/0:4UIkymrC7Y5G/KoM29

Score

N/A

Malware Config

Signatures

Files

bef6c5ce68b4968bb19d3c817973d7714385eb397b870c2f9bd2a9cebcd7d784
.exe windows x86

0be9b3b903fca00cd9acb503ababc11a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetThreadPriority
lstrcpynA
lstrcmpA
GetCommandLineW
ReadFile
DeleteFileW
ReadConsoleA
lstrcpynA
lstrcatA
lstrcpynA
lstrcpynA
lstrcpynA
GetPrivateProfileIntA
CreateDirectoryW
GetFileType
lstrcpynA
GetFileSize
GetModuleHandleA
VirtualProtectEx
GetCurrentDirectoryA
lstrcpynA
OpenMutexW
lstrcpynA
GetDiskFreeSpaceW
VirtualFree
lstrcpynA
GetCurrentThreadId
FormatMessageW
lstrcpynA

certcli

CAFindByCertType
CADeleteCertType
CAEnumNextCA
CAEnumFirstCA

Sections

.text
Size: 17KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ