bed1ee2f5e8f6e286390c06c02f5b1fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bed1ee2f5e8f6e286390c06c02f5b1fb
Size

55KB
MD5

bed1ee2f5e8f6e286390c06c02f5b1fb
SHA1

a7d873688e93c9d305eba996174b25550978b0b4
SHA256

1bb9540e6b502668c1309ecefdfe39da1e59d1ef75d743fc05ec0bcc4841572d
SHA512

33b3321f89ac75b0abc02cbc7072be27e972d251242501638696c91ec141fa15cfa1d87adfc0956cb725ec7ee5f04849f928396d23539309c50d0bca04ca78f4
SSDEEP

1536:LMwqJyD0rM+35kS0DPP8HeVHYHr1SnPNMUDHzkRRax3Is4:j+D0jvVHw1SnFXMRQNIs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bed1ee2f5e8f6e286390c06c02f5b1fb

Files

bed1ee2f5e8f6e286390c06c02f5b1fb
.exe windows:4 windows x86 arch:x86

368b59d8eec272834b819597ba49e77c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
VerifyConsoleIoHandle
_llseek
GetThreadPriority
GetConsoleNlsMode
CompareFileTime
Heap32ListFirst
InitAtomTable
QueryPerformanceCounter
GetACP
GetConsoleCommandHistoryLengthW
ReadProcessMemory
DefineDosDeviceW
FlushFileBuffers
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE