94ef09beb2d5652fa428df62672bd10a[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94ef09beb2d5652fa428df62672bd10a.bin
Size

1.9MB
MD5

3cf32ac61a9cebb6e3f30aeae1c616bf
SHA1

120558ea78440b27a340409235694b2ee66d712f
SHA256

ac8650b7004c2cc2b6a84b02ba7fa068094d2418cf3e35fca8b9929ca175f14c
SHA512

86a1a35630e7bc509ec024c3d9136be31f528f044bdc800eb2f138535a9a68bf64be5fa3876d5c3a615ed336c7952ac43b30a254daa2770d89e08ee2cc070f0f
SSDEEP

49152:9jqgaTQ+wOy4QFVaI2nhIyw+e6JOqoiciB6HDpIl4tkZ:9jqTT5wRhQPI8vJOZ4mDyckZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/016f0cf60cfef7ed434d9fd6b7b33b5bd2540c61fb419ba4f81dd413c2757607.exe

Files

94ef09beb2d5652fa428df62672bd10a.bin
.zip

Password: infected
016f0cf60cfef7ed434d9fd6b7b33b5bd2540c61fb419ba4f81dd413c2757607.exe
.exe windows x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ