be9f800766f968a18c810d09fd600cc6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be9f800766f968a18c810d09fd600cc6
Size

53KB
MD5

be9f800766f968a18c810d09fd600cc6
SHA1

07fdccece8bdab82282a984d76145e5c71507d0c
SHA256

f18df623beea220607bd3bb45318a67abc6b7e26bb23a63e313960b04c593b7c
SHA512

aeb8b234d53b9b528e8709258fb876ffef67d1f9fb0f7a323ad4fb87bf952a6ff56a03fd3e3c7b0f3e78ba90c09fd7ddf47c271675fd5f6528717e041d63ed5b
SSDEEP

1536:mJFNPTPPQCbFAK97Ne6lHpj6YyGC7gN0pKXSX:mBPT3QCb6K97Q6lhva6M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be9f800766f968a18c810d09fd600cc6

Files

be9f800766f968a18c810d09fd600cc6
.exe windows:5 windows x86 arch:x86

2ddd6efb9046b28400304136e8ebee0d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptReleaseContext

kernel32

HeapReAlloc

shlwapi

PathFileExistsW
PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
StrCmpNIA
StrCmpNIW
StrStrW
wvnsprintfA
wvnsprintfW

user32

CloseDesktop
EndDialog
FindWindowExA
GetClipboardData
GetMessageA
GetWindowLongA
LoadCursorA
MsgWaitForMultipleObjects
SendMessageA
SetProcessWindowStation

Sections

.sbalqn
Size: 43KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.krel
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hav
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ