001dfc5f23d5c8ddd4ab30f371432491[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

001dfc5f23d5c8ddd4ab30f371432491.bin
Size

105KB
MD5

eacb62136c6567dace574f511a379c00
SHA1

24c330c9bdb572bd73e738c53aaced3240a6b1e2
SHA256

98b111e9f7fe83dfd16b1928d86079998533124d629e936a7b820a799533ffeb
SHA512

0ac859f6cf5e520bab27487312c28032398641596f3b92b9b0c2a6560db8fc932c1abb032447c8d93dd0b0c7759a04d28adf27807107e4546267ce223b64c27a
SSDEEP

3072:jKxa+Cl/e1zhGnIRhyu1EOzVwPjFzARsk3Q:jrZcGnayu1hyFMR3Q

Score

1^/10

Malware Config

Signatures

Files

001dfc5f23d5c8ddd4ab30f371432491.bin
.zip

Password: infected
35bc24a2561769e8385649c8c06829aeec6801611f32b22c3a79ab76667ff56d.exe
.exe windows x86

Password: infected

8e250e78e5ed457cb0b744b490d83357

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeA
Sleep
SetLastError
TlsFree
EndUpdateResourceA
HeapCreate
lstrcmpiA
GetPrivateProfileStringW
lstrcmpiA
CreateWaitableTimerW
GetBinaryTypeA
FileTimeToLocalFileTime
lstrcmpiA
GetModuleHandleA
GetTickCount
lstrlenA
lstrcmpiA
lstrcmpiA
GetStdHandle
GetExitCodeProcess
IsValidCodePage
GetLogicalDrives
CreateNamedPipeA

objsel

DllRegisterServer
DllGetClassObject
DllCanUnloadNow
DllUnregisterServer

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 1024B - Virtual size: 614B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ