becff1bf7a0b2e23c42a67730f2232b6 | Triage

Sharing

General

Target

becff1bf7a0b2e23c42a67730f2232b6
Size

4KB
MD5

becff1bf7a0b2e23c42a67730f2232b6
SHA1

f2ab918c8303de1def8ca64dbc1c0fc0d30eebc2
SHA256

7f3c00cf77659be68e069c9840dee392dcc2444e81e31e172a97c219092f4c7d
SHA512

a55c5d6b271dd978422104dae5bc388f49260c9c81efe58277132806c57a120d4bbe437513b10d09631d8986d77a6e4b40f2f44867d183d6d3a3ba093672e377

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
becff1bf7a0b2e23c42a67730f2232b6

Files

becff1bf7a0b2e23c42a67730f2232b6
.exe windows:1 windows x86 arch:x86

5c912220d6156162089a88d90f8b368f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

WriteProcessMemory
GetCurrentProcess

Sections

CODE
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE