be4b9cd2e84c1744e29740cf78a374cc | Triage

Sharing

General

Target

be4b9cd2e84c1744e29740cf78a374cc
Size

17KB
MD5

be4b9cd2e84c1744e29740cf78a374cc
SHA1

ed35e6099897f7ac480ebc40fb68dcc75c5a52aa
SHA256

bc19f3977391d1ce13ab733e88333d81666ad71de7466576d8354f3e8569b269
SHA512

a2f035cd200c251b1992d0109159ba0c8553af457a9b96aa7e30c189efe3d23a53f1d08379f02f375ca221a9613c450df248e9f68919688023b24b0767fee42e
SSDEEP

384:s5wTs403c90rqxWO6UFjivzTYX9kD7qNezStCAoQ5O6m:GFVqxaUFsTf/qPZ5Fm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be4b9cd2e84c1744e29740cf78a374cc

Files

be4b9cd2e84c1744e29740cf78a374cc
.exe windows:4 windows x86 arch:x86

61d6fdf307f435705ffecf4a9ecd4280

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA

kernel32

GetStartupInfoA
lstrcpyA
CloseHandle
CreateFileA
CreateProcessA
ExitProcess
FindResourceA
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
LoadResource
LockResource
RtlZeroMemory
SizeofResource
WriteFile
lstrcatA

Sections

.text
Size: 1024B - Virtual size: 554B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ