evil[.]bin[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

evil.bin.exe
Size

193KB
MD5

bd25986b516c1aaddff41235af6527fc
SHA1

3a786c703627216d6fd5669c50564978dfbea142
SHA256

02ff523b0330900767277b319cba76ee33f47d0a71774155613ed6667855adf6
SHA512

733ce84cc4b8a7fcdb6c0f817888a5dc0962e108892651f30d7e5e12afdd06c87954fe4ae21fa3339d12901a5bd40110670d0b3a86b53985d7500774a32b0fce
SSDEEP

3072:EobNdvzd8bvrHFRZaS0dvOuENbZ53ufBT6WMaGfbs1LuPLTmiXLxwYgBOLFUU0qc:/dJGMwuI18QICPLSmdw3OOU0qs

Score

1^/10

Malware Config

Signatures

Files

evil.bin.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ