519101ab5f69b6cbaa00abd85156a8fc[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

519101ab5f69b6cbaa00abd85156a8fc.bin
Size

1.9MB
MD5

372af8010041c3dc5b0de33e0936e682
SHA1

2a795c0a9d2c63686acb3ed3729b09fb7fe6e574
SHA256

b716deb7bf5d80fae8708231dfade7cf70ca698a32073a0e550f2882e27f15ab
SHA512

58c834367ff3985bbee475719dab006193d0fb12899ad725a15ed951f44006fc1379e59081b7575532c5c5038dcf7793f5bf859ce45197847516f0a2f3e583b7
SSDEEP

49152:CPdSuEiA66ZWY8A/VkRuXNVxFKT/qVPdEHA72HXGI9:yLEh66ZfkQXNEDqV1EHWI9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/5a46d6609ab359b4acaff96176d8048cb4e31538916ae42955a8eeac30d1898d.exe

Files

519101ab5f69b6cbaa00abd85156a8fc.bin
.zip

Password: infected
5a46d6609ab359b4acaff96176d8048cb4e31538916ae42955a8eeac30d1898d.exe
.exe windows x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ