be4631a25091ece0865c826c6d830461 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be4631a25091ece0865c826c6d830461
Size

7KB
MD5

be4631a25091ece0865c826c6d830461
SHA1

56af6281ee233b05d0eb281f56d97ebfc4a4cdbb
SHA256

3c5457d5a58ce01a555baf5dd703097fff50f509e49c6817c872c16fd2b0db87
SHA512

f5561e2c8a9fcabb0921f2336382e43954f4287b25d4a18bcfb1d432730f9daf34ee71c25838c82c9d2888cbbb40a3e93fda0d763676b8e60ce9ee8aca764c44
SSDEEP

96:Kg28hnvWnh4t0M2gzRoZjlQHxM0QQQAG4fQy2DCKJdza4oqq6I1:Kg2AWnhnzSRolQRfbf9Fmdza4oqq6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be4631a25091ece0865c826c6d830461

Files

be4631a25091ece0865c826c6d830461
.exe windows:5 windows x86 arch:x86

d0f71efecbe88950c869eb7dc05c1291

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineW
GetProcAddress
LoadLibraryA
lstrcatW
LocalFree
RtlUnwind
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

shell32

CommandLineToArgvW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ