be91be9fe165aa6355e8222c85b2dbdf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be91be9fe165aa6355e8222c85b2dbdf
Size

8KB
MD5

be91be9fe165aa6355e8222c85b2dbdf
SHA1

48516b1e0d9aeb5625776b3743ac894ef14ec5f8
SHA256

37ece376310e12a9557af004eef3da0fd39d425da0e7248f187528199491e707
SHA512

1b7425bb873d9c2e950152742885b1691effeb556c8eca8c05e138b94e430261fc77f50033e972eccf7370c39ba11bea39ab1100cbaa24c36e3cfc076ae3cfab
SSDEEP

192:rzhUrprGSq3YP+U73x9ervlBHOqzmwYRT:rEprnq3yTe7l5fm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be91be9fe165aa6355e8222c85b2dbdf

Files

be91be9fe165aa6355e8222c85b2dbdf
.exe windows:5 windows x86 arch:x86

48f23e2a844098b39c52f16662337803

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
LoadLibraryW
SleepEx

Sections

.text
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE