afd4e7f72260640e860a3be061ee6fd4[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afd4e7f72260640e860a3be061ee6fd4.bin
Size

705KB
MD5

009515a09f9d615177e598d6b95098aa
SHA1

3be8df195d19cc2af81a26baf0ac8697079928ce
SHA256

165066adc54198e099bc717def1bbf31056e1a563ef23506e3bc2c2f58426881
SHA512

c097c6c96c8450ce4b9652e64c89e1b8419e2a483029a5b635988275955251cc008081c9b25815e7cc7703f0268b7398c0376b6c8e997aa50dbc4299bee1c44f
SSDEEP

12288:XOkDR7FrN4wMPIwmGVw5IMocy/58XsODzpHuqsNcaJ57IetQ3hqWAC:XZDRhrN4+wFCocQ88ODzpO5Ncagecrd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/b60cdf37e12697f4afb0b588660e7e955889f4f6d7c420db2e50c8af47558253.exe

Files

afd4e7f72260640e860a3be061ee6fd4.bin
.zip

Password: infected
b60cdf37e12697f4afb0b588660e7e955889f4f6d7c420db2e50c8af47558253.exe
.exe windows x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ