2ebf7f5b65c0e71bf0f36e8e9bbde1c3[.]bin | Triage

Sharing

General

Target

2ebf7f5b65c0e71bf0f36e8e9bbde1c3.bin
Size

505KB
MD5

a37f7606204f6b67bd0dd57fc0db1fb3
SHA1

427f44e84d219937119543082dff47371df8817c
SHA256

978d25370641e03d4faa264e3e0d91cecf023cf5dd49cad828eb7a4fa261cfb9
SHA512

7d152e086cb5e288e6ac04e92918a874c41802a81a4b68a50c881c8c30cee000147e3bff805ec134a8ddd19e2e193ef82ccdd0df53dc95d8480220992821c979
SSDEEP

12288:N5uLRAQti19/J9ZXtk27GVDuolp98YpG7BJTgtrE5IwGnH8JeWQ1pt5G12:N5uLSQkvZi27Gvp9V47B2trE2DHfWQ3b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/c1d948fee0541e31cfa3affa9d99a6ad6cf287601f3ddae9238c3ca379a4686c.exe

Files

2ebf7f5b65c0e71bf0f36e8e9bbde1c3.bin
.zip

Password: infected
c1d948fee0541e31cfa3affa9d99a6ad6cf287601f3ddae9238c3ca379a4686c.exe
.exe windows x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 522KB - Virtual size: 522KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 378KB - Virtual size: 378KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ