befa0c4adbfca6d1ef4305a247f705fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

befa0c4adbfca6d1ef4305a247f705fe
Size

3KB
MD5

befa0c4adbfca6d1ef4305a247f705fe
SHA1

4ed74c86a95949047ae8a563b9b4c25f0695352c
SHA256

0ab54a72f27240881338d98b956351869f6294db1e2475e17c83981be2bae356
SHA512

c8274578e3b21923bc4bcbed43a67dab0594d568caa1f84a4874bff2ea3d5d7fdd195ef0c69625df1c2dc2ef5de1c0f8daa1cd1a698af0dfb61c8e2d08b06207

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
befa0c4adbfca6d1ef4305a247f705fe

Files

befa0c4adbfca6d1ef4305a247f705fe
.exe windows:4 windows x86 arch:x86

505aab5781891dd891a2be86f1a895eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crtdll

memset
strncpy

kernel32

GetModuleHandleA
HeapCreate
OpenProcess
GetProcAddress
LoadLibraryA
CreateRemoteThread
HeapDestroy
ExitProcess
VirtualAllocEx
WriteProcessMemory
HeapAlloc
HeapReAlloc
HeapFree

user32

FindWindowA
GetWindowThreadProcessId

Sections

.code
Size: 1024B - Virtual size: 794B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 1024B - Virtual size: 786B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE