be602cbd751d092f094f8b9a99a36ecb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be602cbd751d092f094f8b9a99a36ecb
Size

102KB
MD5

be602cbd751d092f094f8b9a99a36ecb
SHA1

56250dcadfb9038552bce8790f8f1b1f9e1885f7
SHA256

b624b2bacc4f43601de9a3a435e4c3e1533ddf052f6ce8d838b5af6022850dde
SHA512

18de4646bb6310ba2cb6da6c560fda7d13eea85429e269f3e90c5b97bfcfa6aeeabd857c04b67c57da8da1a1e4215a2eb45af4a8077c3098a65f9aa96ad06b33
SSDEEP

3072:qurv5/Tp9w8tBDWH2VzuOxwiPDTOEZPVu2:/TVp3DWWVzu/iPDZPVu2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be602cbd751d092f094f8b9a99a36ecb

Files

be602cbd751d092f094f8b9a99a36ecb
.exe windows:4 windows x86 arch:x86

9baaad6c7eab40b2177c3bf6047ffd68

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ConnectNamedPipe
CreateEventA
CreateFileA
CreateNamedPipeA
CreateThread
DisconnectNamedPipe
ExitThread
FlushFileBuffers
GetCurrentProcessId
GetCurrentThread
GetExitCodeThread
GetModuleHandleA
ReadFile
SetEvent
SetUnhandledExceptionFilter
Sleep
TerminateThread
VirtualAlloc
VirtualFree
VirtualProtect
WaitForMultipleObjects
WaitForSingleObject
WriteFile

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE