bedcf726403215cecb15ff1a8c65ebee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bedcf726403215cecb15ff1a8c65ebee
Size

122KB
MD5

bedcf726403215cecb15ff1a8c65ebee
SHA1

bb1f4e845847541fb6d339e08f7963186a587ae8
SHA256

5ea2eb17601c3e1076295ba90c66e6d4129a0cb689fb336477e9975cb7deeb44
SHA512

8f392856b5391e518830f0dbc18f8b0851e2f64a532635e9b578ab1eeb4bab735b3fccbe5c6f089b4c6435fc2e06c63c697be7eb680e54495ac0f9c3a333adf4
SSDEEP

3072:jj6vPI80S8zS588E80E80fKPbD808P8PlGusmOIjUwp:/6vAnS8eBEnEnfK/n8Pml1j5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bedcf726403215cecb15ff1a8c65ebee

Files

bedcf726403215cecb15ff1a8c65ebee
.exe windows:4 windows x86 arch:x86

d286ffa15fe8836138d47009bcf5d1de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
__set_app_type
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
LoadLibraryA
CreateMailslotA
GetExitCodeProcess
SetHandleInformation
GetStartupInfoA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ