1becf2f48bd81f76192dab50f47a0ab6

General

Target

1becf2f48bd81f76192dab50f47a0ab6
Size

100KB
MD5

1becf2f48bd81f76192dab50f47a0ab6
SHA1

8b8a26e6942b501de8b99c286ec76d7bfe2030a1
SHA256

e74b6c4fc578421ad1d87a98af659fde548da32c019082471f010e9c4177ca10
SHA512

f9d5114d89cbc7a544d4953b6fd1d2ffb05b84b9eae01e34a5ef3f022f33360a8b1765ae1c2a76feea9c33cbe72fa4ac30f4231e62aaf735f08c7ed1baa93d25
SSDEEP

3072:9x0MaQPGVWelHZcEEY6wgnYy3flljbH9Gl3:9iQP6Bl6jY6wgYyPlFH9E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1becf2f48bd81f76192dab50f47a0ab6

Files

1becf2f48bd81f76192dab50f47a0ab6
.exe windows:4 windows x86 arch:x86

c6a29fa762469819ae32c64512675a1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
GetVersion
CreateFileA
CloseHandle
GetVersionExA
GetCurrentDirectoryA
DeviceIoControl
FormatMessageA
LocalFree
LCMapStringA
GetLastError
IsBadWritePtr
IsBadReadPtr
HeapValidate
RtlUnwind
RaiseException
GetCommandLineA
GetModuleHandleA
HeapFree
HeapAlloc
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
GetCurrentProcess
ExitProcess
VirtualAlloc
SetHandleCount
GetFileType
GetStartupInfoA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetConsoleCtrlHandler
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
FlushFileBuffers
IsBadCodePtr
GetProcessHeap
FreeLibrary
GetCPInfo
GetACP
GetOEMCP
VirtualQuery
InterlockedExchange
SetFilePointer
VirtualProtect
GetSystemInfo
GetLocaleInfoA
LCMapStringW

user32

wsprintfA

advapi32

DeleteService
ControlService
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
LookupAccountNameA
LookupPrivilegeValueA
OpenSCManagerA

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c6a29fa762469819ae32c64512675a1c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 76KB - Virtual size: 72KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 7KB

.text
Size: 76KB - Virtual size: 72KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 7KB