be588089641da2218ce45a58ad22ba5b | Triage

Sharing

General

Target

be588089641da2218ce45a58ad22ba5b
Size

302KB
MD5

be588089641da2218ce45a58ad22ba5b
SHA1

1e7f5fde2620d2d03c641ff34613e2e4b1a309ce
SHA256

52e668ee598cb3092c1b3961c1822fe6f9fad2509afbe4d1164d72b32e764f39
SHA512

3fe3cfc17f3059793221641430114e6628545f28c6f83b2ee6f2b242e00a798899f74196e82d42eedf918f2bf336d44e27d3e52e73f1296fa6b00f7c04b2a21e
SSDEEP

1536:bfYN9rNH+o0d3kV5zfmV994m6ZJ/Fp/KXsit8s1u6dBpUUNG8b:E5+o0d3oz6L563v3A8s1lvi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be588089641da2218ce45a58ad22ba5b

Files

be588089641da2218ce45a58ad22ba5b
.exe windows:4 windows x86 arch:x86

e9503171752bc22c720554da794d380b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
CreateFileA
RaiseException
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ