Static task
static1
Behavioral task
behavioral1
Sample
belge.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
belge.exe
Resource
win10v2004-20221111-en
General
-
Target
belge.exe
-
Size
1.0MB
-
MD5
a927c128c2d48ba867ccc059574da5af
-
SHA1
79c2b1a332f4d654f6ae00b276394ace5811915d
-
SHA256
7dc963c7deb6af1a95cb791c96b8c16559f84098084d6619ed2e0006c6774314
-
SHA512
667769a86443c4a2bf8433a5e5782457361db941748cc2277eeda289510e81b92c663883eb1cd6a4a6cd003dee5b5fa183fecbc17a09656661c45b8faf996387
-
SSDEEP
24576:7Ac1NMS5GW+duDDo/kTz42G6E74lQju9hD:Uc1NJ5GbdaE/kT82G6E8lQju/D
Malware Config
Signatures
Files
-
belge.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 770KB - Virtual size: 769KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 290KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ