Static task
static1
Behavioral task
behavioral1
Sample
Belge.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Belge.exe
Resource
win10v2004-20230220-en
General
-
Target
Belge.exe
-
Size
336KB
-
MD5
507cfde11126659c2475daf2b8ba4f98
-
SHA1
fc28151c4de93e8913446540e6439647ab2de0ca
-
SHA256
a220a3f1acc71cbe5d1cc45001cab2f88d91fa18b8dc4391c25ff11d02607587
-
SHA512
adaddb8e5aad2fad09cccdc127f0a4bebd0f54d8d3b643d178f671109ecccb23d51c6bd2444dc66e84ac74d0e48a419c4107553677f87d744a2165e1f9b37b35
-
SSDEEP
6144:+zW5yHyHrJu/xvnt5s40NKon4YFdipou8/HW4zxkinPVXlKUNT7ZIJ7lBs9xuwu+:+asO8lpXU5ZkXP18W7M
Malware Config
Signatures
Files
-
Belge.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 831KB - Virtual size: 830KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ