bef01afa8530e0ff8c61e6797c39496d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bef01afa8530e0ff8c61e6797c39496d
Size

352KB
MD5

bef01afa8530e0ff8c61e6797c39496d
SHA1

e1ac2f6f4b543e2d9718a6bdf5c7dc3a9b8e5bcb
SHA256

870711599f6834bdd2e5ebb8456fb4058fea52760222909275762669f26966e0
SHA512

7cd619421c36cd8eeb4261fd449082a7120a3eb5752519e129be281aa7b8e5b9b051cfb88d586fa5fa3a755387bdf237fc40d879e0aa935389c380f84b11d9a6
SSDEEP

6144:fWpP1BOPXk6za641v5HL9y3wQkm+zVJBW6cvuw3GUZ88hAZo4iDZc2ZhBkM:AqXkv191QpQcmw3G8NmoJVl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bef01afa8530e0ff8c61e6797c39496d

Files

bef01afa8530e0ff8c61e6797c39496d
.exe windows:4 windows x86 arch:x86

48d7e4031e89b149f334e6e01092c5ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

.text
Size: 19KB - Virtual size: 468KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE