b4be54bef4bd4ad3851f16237232e38a | Triage

Sharing

General

Target

b4be54bef4bd4ad3851f16237232e38a
Size

240KB
MD5

b4be54bef4bd4ad3851f16237232e38a
SHA1

122137a3346848f70409fac01e26cb3171074a35
SHA256

879b9977e0f396b8b3f0bf3f2e2ff22c0d26185a3d2096b370b32e52bb8644fe
SHA512

8c4d4fc491574529872bce7a722673f857b90e27a700f63684a0259cb51ba9f35a6e03e674c252b92994d9c5f47bec7e2c2fa01de0ee5e52e4cbe4a9a0629420
SSDEEP

6144:LoDHy5sFlJgSqyBcjXRyCDnywWRDbQ9cxo8pX:LwSmFlGSqyBOXRVDnywYDE6x5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4be54bef4bd4ad3851f16237232e38a

Files

b4be54bef4bd4ad3851f16237232e38a
.exe windows:4 windows x86 arch:x86

51842d071f09eaf32803940166d83330

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EraseTape
ExitThread
GetSystemTime
LockResource
CreateMailslotA
SystemTimeToTzSpecificLocalTime
LockFileEx
IsBadReadPtr
FileTimeToSystemTime
GetPrivateProfileStringW

user32

MessageBoxIndirectA
CloseWindow
GetWindowLongA
KillTimer
GetDlgItemTextA
DialogBoxParamA
ChildWindowFromPointEx
SystemParametersInfoW
LoadBitmapW
SetWindowLongA
DeleteMenu
OpenWindowStationA

gdi32

SetBoundsRect
GetRasterizerCaps
SelectClipPath
EnumICMProfilesW
CreateDIBitmap

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE