abf59f25c202ce0d5a0f92e6763696df383c1dde91b66c09c2e34df8b0f4d930[.]bin[.]sample | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abf59f25c202ce0d5a0f92e6763696df383c1dde91b66c09c2e34df8b0f4d930.bin.sample
Size

115KB
MD5

e005171e5914b8390981fb02964e7702
SHA1

29d45487819daa20b890d79141c07864ab3918fd
SHA256

abf59f25c202ce0d5a0f92e6763696df383c1dde91b66c09c2e34df8b0f4d930
SHA512

e34f84f7e24c05a0a5b9397d4c6bfa8b51e218635b3726726713658004c215812b17027737f5c7ed4fd9d9494b3868210336899aa207135aaaba52e13e767d2e
SSDEEP

3072:tz1JsUSKe5+n8I1fnDwvz1qNCMQiccl5KCDmOUkw:t52DKuk1/UZoCMi8tDmOb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abf59f25c202ce0d5a0f92e6763696df383c1dde91b66c09c2e34df8b0f4d930.bin.sample

Files

abf59f25c202ce0d5a0f92e6763696df383c1dde91b66c09c2e34df8b0f4d930.bin.sample
.exe windows x86

ee16cc2342ec781c2c3f0e5ef187d81e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPriorityClass
GetCommandLineA
GetEnvironmentStringsW
GetTickCount
GetCurrentThread
GetProcessVersion
GetEnvironmentStrings
GetCommandLineW
GetVersionExA
GetCurrentProcessId
IsDebuggerPresent
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetStartupInfoA

shell32

SHFileOperationA

msi

ord154

msvcrt

__p__commode
_onexit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_exit
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ