04c4b3f2cc668fbe5a93d7e632b3d076[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04c4b3f2cc668fbe5a93d7e632b3d076.bin
Size

978KB
MD5

774c618159fc42c791a706bd107395e2
SHA1

3dc2deb0fa382665c857ee590aecb87d3cd9052d
SHA256

36ac081ac6c8dbe77f121a1ca9b293cce0dda96282b16548e905880c26707f02
SHA512

a2f562798dd64eb98a19816a94721fe1bb92f3b9dd1c2e052d88829805cb57a544967e609fef337d5e9d881c70ba519cfdee2e6c53953e5c757ee079f6aad593
SSDEEP

24576:ALJKlef5bigf1qXIBq9/t62lnMwX5rOMHkScPSaaC:A1KYBPfgiqK0ZXHRUSax

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/02efe82b255c46ad12464a6997874fa6aa669a42e5d94a1609968535eb1c9743.exe

Files

04c4b3f2cc668fbe5a93d7e632b3d076.bin
.zip

Password: infected
02efe82b255c46ad12464a6997874fa6aa669a42e5d94a1609968535eb1c9743.exe
.exe windows x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 367KB - Virtual size: 366KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 877KB - Virtual size: 876KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ