1af734af3455f97c50b96a0923746f91[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1af734af3455f97c50b96a0923746f91.bin
Size

494KB
MD5

e9e9d013de50d54a2fe8f1b1426f5076
SHA1

b7a889cb4be9233a1f699f2e4f9a4fe8d0f3912b
SHA256

defcf628a20a585ed4022417ac1c1f0cec02ca1dd05d51abddc2d80d328cf758
SHA512

2e0a5d86d420d553d295a49880a76c7d2f41cd044bdde9b8f6d0371c55ba8c9ea91ef3e21d2dba66f1bc083641658281e5cdb749f527c4e6fa12fdc430016e28
SSDEEP

12288:lylu5SUwwxSpo/rv6/EdZa32d85KPmFp2MuocRBfTY:lygMUwwxSpOTeGPPupJudf7Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/90399d618bfbcf4d3adf3abebad223be29ef4a310b486d7f7e5b8bc3b2a00416.exe

Files

1af734af3455f97c50b96a0923746f91.bin
.zip

Password: infected
90399d618bfbcf4d3adf3abebad223be29ef4a310b486d7f7e5b8bc3b2a00416.exe
.exe windows x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 439KB - Virtual size: 439KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 357KB - Virtual size: 357KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ