0493f40628995ae1b7e3ffacd675ba5f[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0493f40628995ae1b7e3ffacd675ba5f.bin
Size

1.6MB
MD5

0493f40628995ae1b7e3ffacd675ba5f
SHA1

35577959f79966b01f520e2f0283969155b8f8d7
SHA256

02a28bc6829edef5e8a8f0cc5140056d2842588daea61247a31f9cca69061bbf
SHA512

e9e706f82670d366c7193afd8da52aa089b95938a52410dabcd5a97026094c29a649cd6dbbd71d858103787e05dad88a144dd27fc3fcf757452cb9acc1f64a24
SSDEEP

49152:8urvn9Jex71EFye+ZC8hSh08XHAxctlIi+SO+NCmOevc+eE:jvCHIye+ZC8hSh083UctlIbQCmOev

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0493f40628995ae1b7e3ffacd675ba5f.bin

Files

0493f40628995ae1b7e3ffacd675ba5f.bin
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

SetupWorkStation
SetupWorkStationW
ShowState

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 273KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ