belge[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

belge.exe
Size

1.2MB
MD5

151dafcb24f6c80b1a8f9ca756616635
SHA1

15182ea4f633c64d331d49937caf85f2e114fda1
SHA256

485061f81c25d98b674e9031ecef0df3d18c3e353b70397e941b32783d1e5fb4
SHA512

34326be2b55408ccb43275b18515cb89c359e0f80dab6622cfcccd64287937d30371742ea5905e6e36865ff669ac8be53ccc74acd1b3ed813b9c68f0985f54b1
SSDEEP

12288:dMuQABHyR2BYpg1iNNPlhWeciA9ddlrw4DsFZ2TqjolCMO1u1pI4kBGgbvkm4gFe:IUugQNPlhWecdvlrbDs9KCh1b4mpJF

Score

1^/10

Malware Config

Signatures

Files

belge.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 933KB - Virtual size: 933KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ