be4eaa2f12359200d8a1450e0cf37155 | Triage

Sharing

General

Target

be4eaa2f12359200d8a1450e0cf37155
Size

12KB
MD5

be4eaa2f12359200d8a1450e0cf37155
SHA1

97f0c76d41d82e49f303c45264b48494ef269748
SHA256

21e2a8a95af1c6e4c6fe804b1220ead3b2357667e436127f185bfff3d34b3b93
SHA512

5de4977c1d8969d6b3c0fdbaf71014d0e225a111d99c45c24923c34606e598147a13fbc24fe21660de8b4a9219865508849a1c500efe225a87cadf75ef4a2ca5
SSDEEP

192:NDOta3gLte01Yxx0R8fBaRbGFnBO1novHtVqI670fvX+2aOdp:snY01YnA8fBsynBO1nsD4wmwn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be4eaa2f12359200d8a1450e0cf37155

Files

be4eaa2f12359200d8a1450e0cf37155
.dll windows:4 windows x86 arch:x86

1701423ae55bb443bfb9c3cd18dedfb0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
VirtualAlloc
GetModuleHandleA
VirtualProtect
CreateFileA

Sections

.text
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 66B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ