bec0717dd8d0189f01275da4a61d3b01a1c58c67a3efa85147e1abe2eed7e37d | Triage

Sharing

General

Target

bec0717dd8d0189f01275da4a61d3b01a1c58c67a3efa85147e1abe2eed7e37d
Size

46KB
MD5

d955e11b707dffe88cd92082f1eef9eb
SHA1

11c4fd60c4d51f20b8c9b483788ca6e3ac0ab14e
SHA256

bec0717dd8d0189f01275da4a61d3b01a1c58c67a3efa85147e1abe2eed7e37d
SHA512

47721b5e5fd5714072f44d7ef5a5dbec86d308c9c393da31240ae4dfed32e7ceaed704cb95b89d64f4438a4f3cb09254207feb1b35c227cd3ee768c7ded0988d
SSDEEP

768:NrvyjsX6IGS6P8PIViosv5k/SmPS84BC/yM/aKRm8QtkCpDbrm:53X6Im8I0Rk6WSqm8QtZDXm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bec0717dd8d0189f01275da4a61d3b01a1c58c67a3efa85147e1abe2eed7e37d

Files

bec0717dd8d0189f01275da4a61d3b01a1c58c67a3efa85147e1abe2eed7e37d
.exe windows:4 windows x86 arch:x86

0b565d3cc6d373289c6a9d8622012580

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtAddAtom

kernel32

SetLastError
GetCurrentThreadId
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleA
DisableThreadLibraryCalls
FreeLibrary
GetCurrentProcessId
QueryPerformanceCounter
VirtualAlloc

atl

AtlMarshalPtrInProc

Sections

.textbss
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ