becc439dc6d1d966303942e029f03a98caf0a89eed2625fe4ed637d2133c5c11 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

becc439dc6d1d966303942e029f03a98caf0a89eed2625fe4ed637d2133c5c11
Size

3.5MB
MD5

1c0d316fd90b9153b674ddfeee96b62d
SHA1

3a94d703c9ed952225b21c2eb395ca822c727abe
SHA256

becc439dc6d1d966303942e029f03a98caf0a89eed2625fe4ed637d2133c5c11
SHA512

400f77673ee12c846fc8cb040c14c712f8c18487076b25868b994964dba8cdde684f98ec63c8203cf7ed6d844e3800c7fb47f68f74e648ffbb524b295b3ae96e
SSDEEP

49152:3fv/XRm3fUHv648igad1UUi9Gi2G+KXBqdF9T53/A1Nc3Wad7zDMa:3H/b6YgafUT2GhkP/COV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
becc439dc6d1d966303942e029f03a98caf0a89eed2625fe4ed637d2133c5c11

Files

becc439dc6d1d966303942e029f03a98caf0a89eed2625fe4ed637d2133c5c11
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 361KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 124KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE