5ba4bab377c6656e50a48cd48bd84c59[.]bin | Triage

Resubmissions

29/06/2023, 15:19

230629-sqj4jadg27 5

08/06/2023, 01:25

230608-bs2ypaac94 5

Sharing

General

Target

5ba4bab377c6656e50a48cd48bd84c59.bin
Size

298KB
MD5

15ce5b48dba6b49529b8e84de7918b15
SHA1

7f376b11ac1f4acde4abe29037d8161bebd9c167
SHA256

8f7cb941481560bebb6b1ac241fb02b7e3f04c287169a220d4c28ddf569ed85c
SHA512

7711c895d90ff9466ff09627218e0e96351d476546f06c53fff57143ccbee141a4d8be6a3a89bb024e3671ad87c958058f4308d3464a2bfdfa137aa8437a7692
SSDEEP

6144:kaoar0ez34/7KIKcmhIZoUCGf9lKMNM3l90NKWKUhlA4XBor8/HaSRipupwYa/SV:ToaP8/nKcmBG1seSH0orUhz/6vutOl3W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/bc54380e0004ee82e6e6a07b4dc3c37481572257294fabc856248e597bcb8ccd.exe

Files

5ba4bab377c6656e50a48cd48bd84c59.bin
.zip

Password: infected
bc54380e0004ee82e6e6a07b4dc3c37481572257294fabc856248e597bcb8ccd.exe
.exe windows x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

Cqk{W)
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ