bec30bf30609ac9423ecefd44e165c6b | Triage

Sharing

General

Target

bec30bf30609ac9423ecefd44e165c6b
Size

185KB
MD5

bec30bf30609ac9423ecefd44e165c6b
SHA1

ca5cd1a9a2069fb59a9960e702b9b8e21fe929e8
SHA256

024d92ff5bdfd71df650253d9d0b40631d627d3296ac0e0cf806e4ecdbdcf8e2
SHA512

43a54059cb7e7bfb8702d220d114376d50ac71a0da6bf623660800f5e806d9835659283eccf784d45d6cb5bc7b7b37db1fee69f6c6727865c228a67dd9cd0fcc
SSDEEP

3072:e+cLzMl2rgE+QTuZwoAfng951LTMRY6PZZmEW1D+L4pJgEPeVJ0blmvLru9K9Fgx:ejzMl2rJEwobfJqdzmE2+yCMlmzru9mQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bec30bf30609ac9423ecefd44e165c6b

Files

bec30bf30609ac9423ecefd44e165c6b
.exe windows:4 windows x86 arch:x86

68d162307596ca464b87c17a0525d4d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetUserDefaultLCID
ExitProcess
CreateFileW
GetModuleHandleA
SetStdHandle
Sleep
GetACP
TerminateProcess
GetVersionExA
GetDateFormatW
GetTickCount
GetVersionExW
GetVersion
VirtualProtect
GetOEMCP
GetStartupInfoA
LeaveCriticalSection
FreeEnvironmentStringsA
ExpandEnvironmentStringsW
SetConsoleCP
OpenProcess

msvcrt

__dllonexit
strchr

gdi32

Rectangle

advapi32

RegQueryValueExW

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 818B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ