be06c299da47136a5e80e63317fbf377 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be06c299da47136a5e80e63317fbf377
Size

244KB
MD5

be06c299da47136a5e80e63317fbf377
SHA1

68114fb54afeb73873ff969dd5eff7f850814578
SHA256

ea91b005d543c3ea3fce1c54d9bd9af51eec97b015c6d1274eb575fd9be79a51
SHA512

c3d362392f69b4a320343dcaabfd7b68e25dd7866d3a6ac21b4985eec62264154902c3654bfacc2146c6ca6ced1bc9819b60095f495c13d8c1a092982a9d541b
SSDEEP

6144:GjVAu2CV2NSFnIuGjdSV76nDwrdkmyP8:kAOASFI9i6nDw5ek

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be06c299da47136a5e80e63317fbf377

Files

be06c299da47136a5e80e63317fbf377
.dll windows:4 windows x86 arch:x86

458bd26931db62d3ce02cafc8bf4163a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
GetCommandLineA
IsBadReadPtr
ExitThread
LoadLibraryExA
GetCommandLineW
GetModuleHandleA
LoadLibraryA
GetModuleHandleW
VirtualAlloc
GetProcAddress
ExitProcess

Sections

.text
Size: 216KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ