becb058d4a5a09f4d6ff0e51d17be8f858eacda3c91facaada6af538892a79b7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

becb058d4a5a09f4d6ff0e51d17be8f858eacda3c91facaada6af538892a79b7
Size

814KB
MD5

65d202c48153b88ea6a65bde3ca401c8
SHA1

e2071ffab7b6fa1a806c91eac4f208371d2e9288
SHA256

becb058d4a5a09f4d6ff0e51d17be8f858eacda3c91facaada6af538892a79b7
SHA512

954c2bc6dafd41d4f57336e79ed4362aceefb5a287943bd380beaf2d0e519425325eb4f5cb17878570542810c3ec275fe5075d722e7152c38a1a1ad015e4944a
SSDEEP

24576:mTRFzx1DfrJ/qvYhWRIrZ5y85vH9B26eO5F5aA:m1pDl/u+VN5zvHF5J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
becb058d4a5a09f4d6ff0e51d17be8f858eacda3c91facaada6af538892a79b7

Files

becb058d4a5a09f4d6ff0e51d17be8f858eacda3c91facaada6af538892a79b7
.exe windows x86

7017ed7a5548df8b1c4dfb50594db2c5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep

wininet

InternetReadFile

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 21KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 781KB - Virtual size: 784KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ