0a1b44ca37e95c9375b11bec1452509b[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a1b44ca37e95c9375b11bec1452509b.bin
Size

2.4MB
MD5

e28e225007cf4754e8fd0d806cbb05b4
SHA1

bed4b9fd34cf768d98ef5db995a3a6c8813cd715
SHA256

3e7bdc96f24855322426923eea12406a01456940c1de4cb4d3a4e5243a8afff4
SHA512

2aa1ed0eb527a8b79878022879b27b6c60cbee2f28d5041ea77b84f02bc1a3a0508f289ee70c610d0c9e04d8c30209482273baa27cc91e93ea55806d51fc9a8b
SSDEEP

49152:tBLNIrc7ITX61rXYM3KO1COZfCinLa2UZgItP99KJ7Osz0NxdlF/QvcB:KrEhDYMa8P/nuyItPvm0NxV/QvI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/59d0a86e29a877fe6ab943b03f01a553274e626eb5f2da49605b98aaa23e6ab4.exe

Files

0a1b44ca37e95c9375b11bec1452509b.bin
.zip

Password: infected
59d0a86e29a877fe6ab943b03f01a553274e626eb5f2da49605b98aaa23e6ab4.exe
.exe windows x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ