beba456332ed0cbcf7029764da38ce45 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

beba456332ed0cbcf7029764da38ce45
Size

444KB
MD5

beba456332ed0cbcf7029764da38ce45
SHA1

082e8841bea812816e255f2b8dd842a282ffb471
SHA256

f54b163fd8af4333a18032ee07447e364af35a0d32d4c3916a6b978ec4ed5d7f
SHA512

a94d41fab622c41ceef10ded87b57f257af26ab0485d3e17611b8dd577ab0fa0abdc94650798ead71b6c84b2031cf21d2fa1431af4449e36e90ce5846ace8e2c
SSDEEP

12288:ChQ7lM9czEgn+vHwqgY8FFbrLysWFTc4Q2FTa8:9lMWn+4qV8SFTc4ba8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
beba456332ed0cbcf7029764da38ce45

Files

beba456332ed0cbcf7029764da38ce45
.exe windows:4 windows x86 arch:x86

3fd32c5cc88b57d56c9058eb6cff9edc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualProtect
GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

oleaut32

SysFreeString

mpr

WNetGetUserA

version

VerQueryValueA

gdi32

SaveDC

comctl32

ImageList_Add

shell32

ShellExecuteA

wininet

InternetOpenA

winmm

waveInOpen

wsock32

send

netapi32

Netbios

msvfw32

DrawDibDraw

avicap32

capCreateCaptureWindowA

urlmon

URLDownloadToFileA

ws2_32

WSACleanup

Sections

.text
Size: 436KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

linghun
Size: 17B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE