2B50DE65FE8857463A551BB76CDADC499271C7868A68B11A95407D9F13D272ED | Triage

Sharing

General

Target

2B50DE65FE8857463A551BB76CDADC499271C7868A68B11A95407D9F13D272ED
Size

1.3MB
MD5

fea98e530b37bccef527f9d00c52e29e
SHA1

93f4ac4773bb5e2027ea7e5806ca97bb0bfe7783
SHA256

2b50de65fe8857463a551bb76cdadc499271c7868a68b11a95407d9f13d272ed
SHA512

1b33cb036b2d772455d61684ef99724d6a67c0b813658e72ac27ff8703d29de9db56867be077f12caac26d9a31a8b3b097cea15e6b3e75c51a9dd2b5c8b61258
SSDEEP

24576:9YkimX0T9OlQFXL0ZQMXNFi/EVn1dnkHV:90GQyQiF1jdnkHV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BETALING.EXE

Files

2B50DE65FE8857463A551BB76CDADC499271C7868A68B11A95407D9F13D272ED
.iso
BETALING.EXE
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 792KB - Virtual size: 792KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ