be07d6ee8c083eee2db74f07f15600a5 | Triage

Sharing

General

Target

be07d6ee8c083eee2db74f07f15600a5
Size

28KB
MD5

be07d6ee8c083eee2db74f07f15600a5
SHA1

56fa024d0429d96d94e2105cec8e3aaf5db0d608
SHA256

e764b7b188a9c7984418167ee08aacd12293a8cbd3bf1d6f529381fbeef9128c
SHA512

289e32935a18c1a3cc3659823dc326fee94d6be3e769383e9f0998d437fb48e8f44fc0857e396a2ea0d9ff533527163c1cc2bbd7b94d8920830a6d2488bd4ee8
SSDEEP

384:o4Ru4Q7/MwxmlnPNt3vkAyy3FaJOm1dDcZf0x:o0RQJy3fyKFaRdDcp+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be07d6ee8c083eee2db74f07f15600a5

Files

be07d6ee8c083eee2db74f07f15600a5
.exe windows:4 windows x86 arch:x86

e3d0601476e80d5cbfec322ac79b84cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostMessageA
FindWindowA

advapi32

RegCreateKeyA
RegCloseKey
RegDeleteValueA

kernel32

GetStdHandle
HeapCreate
HeapDestroy
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetOEMCP
GetFileType
GetStringTypeW
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetProcAddress
HeapAlloc
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE