03f336e62909cebddc6a5ab34ab279b4[.]bin | Triage

Sharing

General

Target

03f336e62909cebddc6a5ab34ab279b4.bin
Size

1.2MB
MD5

359c2919f9de4891d427713a70b45a59
SHA1

679ded648e610c1036b70361d0e5c62dc1bb9d60
SHA256

b0015b492fc9e2b3a680bb860b1a170256478bf493c9994fba7a54ff21911d3c
SHA512

318cf759946b2e5d839861ecc3c237a94b00f84f6a5c88fbabb9d3ef8da3505c8e87565cd1912fe18cea5558ac8db00c64d5e7edbf256352241224a96365927f
SSDEEP

24576:DB6y9uxNfsMwPS/uavCuO1MjikbyKnNSTLMcL0zTbkXqtsq49Okock8:DB6y9osMvuaq20T5+Tgq4ckocZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6d23359c00ea8ea4443ae21facce2de6dd4402cf581310223778a7d937b41f5d.exe

Files

03f336e62909cebddc6a5ab34ab279b4.bin
.zip

Password: infected
6d23359c00ea8ea4443ae21facce2de6dd4402cf581310223778a7d937b41f5d.exe
.exe windows x86

Password: infected

aa3d745697d69b3440b3bb580badbd95

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

connect

psapi

GetModuleFileNameExA

kernel32

GetLastError

user32

GetWindowTextLengthA

gdi32

CreateFontA

advapi32

LookupPrivilegeValueA

shell32

Shell_NotifyIconA

comctl32

InitCommonControlsEx

msvcrt

malloc

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 332KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ