be18bf6bd69b68d43ab998e874c0bd0d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be18bf6bd69b68d43ab998e874c0bd0d
Size

16KB
MD5

be18bf6bd69b68d43ab998e874c0bd0d
SHA1

7b46d049fd848d08fd69d50bf1bac9ac35446c62
SHA256

9b44af1f1c6c691c1820cdd1014ee7d7f97b3e3c9df8ce10126e5665e6e34bde
SHA512

6013591b35cde1c696e325411741644cc7e800c54762dd33428100c334a6bb51a2cacb8f15fd9d82770d99d03924a876a3fef1bbb7ad585822be464bba075b6e
SSDEEP

384:A8BX+UjRrHCtETwyBdtRakw5dVKuP9NDvZx39uc9:rLjtRMg7MKur3Uc9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be18bf6bd69b68d43ab998e874c0bd0d

Files

be18bf6bd69b68d43ab998e874c0bd0d
.dll windows:4 windows x86 arch:x86

fdb7543c7b885e8a68ab548905ecd8a8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualProtect
GetFileSize

user32

BeginPaint
CreateWindowExA
DefWindowProcA
DispatchMessageA
EndPaint
FindWindowA
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
MessageBoxA
PostQuitMessage
RegisterClassExA
SendMessageA
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 662B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ