Nyancatbeeps[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Nyancatbeeps.exe
Size

25KB
MD5

b62f250513183aab8813c756fbf37aec
SHA1

803a8ae202cffd172d3498797956b4135dc0dbc5
SHA256

a1ecf5ec764d090f154e44609a056df6800f7d5877921837cc373510d541ace4
SHA512

80b388a9a1359c6d20e1d6751daabe41c62246587d7946b0136043fdc33c0dba4b709f482888afc12aad6085e8e573699e2cf86c8680e00f120b9ee4c2e52569
SSDEEP

192:rfHjhTRQOrGP7hCCpeQfMas6FJ2eUsCXbA1KI63LDnnjwa0XdvfZoN4/fm1kg/dK:R0odUeIqrVQ0T5NeMrIr9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Nyancatbeeps.exe

Files

Nyancatbeeps.exe
.exe windows:4 windows x86 arch:x86

7cdd50fea7f8021c01953bb22b42f837

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

_beep
_sleep
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
printf
signal

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE