f584c9a6bff7b3a7e974ff15448ef8ca[.]bin | Triage

Sharing

General

Target

f584c9a6bff7b3a7e974ff15448ef8ca.bin
Size

1.7MB
MD5

61e262b8d15be1049167e1fe82a564c0
SHA1

4e3b73097133bb77afde3309ecf67ccbb0352e4c
SHA256

2be3899d76517bf018c783beef84b6a5c9e57365a018d429bd9c749edb2d27d9
SHA512

ae0c94d8905266f591a2d4c285ce7ffc3f68c7c67c17af67b53292bbfb20717417baa3d25d0034f18bd18569aebe9af81ed5a790ad552487d711295708884203
SSDEEP

49152:uzPIeyPJlweDlD2Wh2qVj0nDSrOc6tiIm0JQfQ6q93Pcc:uDIeyPJlFDrhlKcpIofQB0c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/28e0e5becfb8045063d9c9403bb7491aa14143f86074c0e63d54402841d2d905.exe

Files

f584c9a6bff7b3a7e974ff15448ef8ca.bin
.zip

Password: infected
28e0e5becfb8045063d9c9403bb7491aa14143f86074c0e63d54402841d2d905.exe
.exe windows x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ