stage3[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

stage3.bin
Size

1.0MB
MD5

6223c3635b53a45058e842bdaf308286
SHA1

c741ddcb0640b0e362f89fa9f3ffd46614d5868c
SHA256

5fdfd8fcb6ab776b492d4ef4e35105db48ab198f3564ac5a3963b73530926e0b
SHA512

90d118b150408134e1ec7a55644232dcb5adb60bb1426231976fde5184529cfa21d496bb7d6139bde386d5aba14173290323f53149d16c3a45847d3f7bf9c7f0
SSDEEP

24576:degkyr71sdb3iN2eOF58oh16KaRyfVHSXjalLat:deg12Z3uhOFZhYjROVy0mt

Score

1^/10

Malware Config

Signatures

Files

stage3.bin
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 209KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 785KB - Virtual size: 785KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.peqo
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ