be1eb6964ecde6bd41b7092f5e22a575704e2fe4033c5eb599ff2613b951b953 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be1eb6964ecde6bd41b7092f5e22a575704e2fe4033c5eb599ff2613b951b953
Size

74KB
MD5

8d5aba9cb4edd1132001124d003ba357
SHA1

7c636eb12aa5b5db4e8eb883812fbefe27d6b578
SHA256

be1eb6964ecde6bd41b7092f5e22a575704e2fe4033c5eb599ff2613b951b953
SHA512

0bc24fa45c1f7e86505c536ac1609e37c76ab61eb3eaf9bdb03b4346f1d0cc9323cfe9e8e4dc0da7fd3a35d299333ce503c1b2b89462cad672cd72cddc9f064f
SSDEEP

1536:1hyToPledgGkAlSt9yzkwUk6Nr5kEHIwA6mu:ghgRAlStYzkrJNFkEH9f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be1eb6964ecde6bd41b7092f5e22a575704e2fe4033c5eb599ff2613b951b953

Files

be1eb6964ecde6bd41b7092f5e22a575704e2fe4033c5eb599ff2613b951b953
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE