befeb6e250de455f85277e02e2acd90775e7c3f8b919353e37526d0ec6ce9066

Sharing

Copy URL Twitter E-mail

General

Target

befeb6e250de455f85277e02e2acd90775e7c3f8b919353e37526d0ec6ce9066
Size

31KB
MD5

68a5941eb8ae804d88d9588eb732ac34
SHA1

dc67404abd85bfe02816f9bb167a1256a401d87c
SHA256

befeb6e250de455f85277e02e2acd90775e7c3f8b919353e37526d0ec6ce9066
SHA512

81d3119414f3dd149af02f7ddf37f374badd2177ee50391e71814fbe885e6a2244eacbf22da43f180df7f3c7b59daefe0392a5ac1a0e314c809cc9291e0e7f92
SSDEEP

384:P333ZzrkJaJhGGvsjpT7gd1kZALaL3LjXUrNQUsfzhVplGexAflutQKmQnz4TyNw:f3ZzgoJMpA1vKv9llHGlyQ0K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
befeb6e250de455f85277e02e2acd90775e7c3f8b919353e37526d0ec6ce9066

Files

befeb6e250de455f85277e02e2acd90775e7c3f8b919353e37526d0ec6ce9066
.exe windows:6 windows x86

1cf7a0c0d6262b966aa0ba63c9eb6a5d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

vcruntime140

__current_exception
__current_exception_context
memset
_except_handler4_common
__FrameUnwindFilter

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_register_thread_local_exe_atexit_callback
terminate
_controlfp_s
_initialize_onexit_table
_c_exit
_cexit
abort
_exit
exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_initialize_narrow_environment
_configure_narrow_argv
_set_app_type
_seh_filter_exe
_register_onexit_function

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

kernel32

Sleep
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent

user32

MessageBoxA

mscoree

_CorExeMain

Exports

Exports

SDL_CreateWindow
SDL_GL_CreateContext
SDL_GL_GetProcAddress
SDL_GL_LoadLibrary
SDL_GL_SetAttribute
SDL_GL_SetSwapInterval
SDL_GL_SwapWindow
SDL_GetError
SDL_GetWindowSize
SDL_Init
SDL_Quit

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1cf7a0c0d6262b966aa0ba63c9eb6a5d

Headers

DLL Characteristics

File Characteristics

Imports

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

user32

mscoree

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 21KB - Virtual size: 20KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 400B

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 21KB - Virtual size: 20KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 400B