be68c5c44fd0c89911eb1fc565624bda | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be68c5c44fd0c89911eb1fc565624bda
Size

56KB
MD5

be68c5c44fd0c89911eb1fc565624bda
SHA1

1366b9db8767b4c9393f1e56f79bf378ac961825
SHA256

1ba8702e5c2268b2796386888081f38604379eaff06dd9ad948602b94fd67982
SHA512

f3e7b0d3935c83552ea05a9bd9f9cc6b97db548166b8ff5b568a3a7fdc9f3c6bdaeb449e6c0071570969f977f75c9e90be12d86e98542fe125be220589f51d5b
SSDEEP

768:HhWd42MTRJAzdXL+T4WoR6UkaxNyJF43sI/vCqJDrLyKwlClaOFQ+8+sx2:HkdKRyhXL+bo0QykNrLym+Msx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be68c5c44fd0c89911eb1fc565624bda

Files

be68c5c44fd0c89911eb1fc565624bda
.dll windows:4 windows x86 arch:x86

b1df67b20852ca66be5e27adecc5e7e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Beep
ExpandEnvironmentStringsW
Sleep
OutputDebugStringA
QueryPerformanceCounter
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetFileTime
GetFileSize
HeapAlloc
GetProcessHeap
HeapFree
FreeEnvironmentStringsW
GetEnvironmentStringsW

Exports

Exports

lpcelwf

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 370B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ