beacon_VP[.]exe | Triage

Resubmissions

20/07/2023, 06:12

230720-gyfkjadf7z 10

17/01/2023, 09:26

230117-ld6y7shf3z 10

Sharing

Copy URL Twitter E-mail

General

Target

beacon_VP.exe
Size

596KB
MD5

78022aaafb1bdfe2ba2095147bddfcad
SHA1

f78e61258fc39633666dc46adbfc1764d45db5a0
SHA256

5d897ac5c7c3fb20d6b3f34dbfd01fd10121ff446beb9166bcbbad5cf2818f64
SHA512

7daa5af8e6df870f21e8d0abfba41d005cb20d27284ee529f2ee8517bbc78525620d2273448b00b8492b1493a5b92b69fa3206d92115f00c7966e22923152cf6
SSDEEP

12288:cfB4MdIyfJSMeGf9VWemrwntZHvq94wf0FsBDg7t:W2OIyfosf+fsntZS94wf0Ug7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
beacon_VP.exe

Files

beacon_VP.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 2KB - Virtual size: 292KB

IMAGE_SCN_MEM_READ

VProtect
Size: 352KB - Virtual size: 356KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VProtect
Size: 220KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VProtect
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ

VProtect
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE