be75e408b8e99bc48cbe154e09678c24 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be75e408b8e99bc48cbe154e09678c24
Size

42KB
MD5

be75e408b8e99bc48cbe154e09678c24
SHA1

915b68610b9b70a984347660e1332aa94fb3fe0d
SHA256

580825e9782cb16fa80e5d1e2069d8afc0760c1bbcf355e803defd61b52ac1c2
SHA512

f6a285cd1b92386c9dd3829e7b16ca25e5f1891f03b55fae3d8516dc164797b21da62b48460025955bebb864fe057c2d33c946eef8925f3a5070ae09c31953c4
SSDEEP

96:hiK864ajSf3PXkX+1BBO2YKPZSC9taD1+F+nQ:bBy3O+16YZgD14+nQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be75e408b8e99bc48cbe154e09678c24

Files

be75e408b8e99bc48cbe154e09678c24
.exe windows:4 windows x86 arch:x86

85773a17eac8d4a521b00d2cca9b9ac3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetDC

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsA

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ