939f2e7eedbf9a4ddff93a2af19943cc[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

939f2e7eedbf9a4ddff93a2af19943cc.bin
Size

540KB
MD5

2705cb5de13a0ad3abf213f7f492f7da
SHA1

9f7334d71b33d6ad89536704e77b348a31ee8f0f
SHA256

f37099eae724a2409190353cf6c0ab8dd9228e4471cb85a7b4238c0dcf354832
SHA512

74da6f81eda632add0433ecc01f6524d95c5dffe15ac9c867174be0ea0408e43e1eb104d89ac93df3b176df431df473d85f0da46098be0b25415b1b9669fbb6d
SSDEEP

12288:0npN5R6YXogt3Sc3tBOtLGYrhUl+OI3YV8L+KUiGfXLv:0pHcqSc3TiLGy+c3cmZdiXb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f7ee631c2fa267f48f9c0f556255c0e3f2819c7f5d60f9f84425a8f9aa75e09c.bin

Files

939f2e7eedbf9a4ddff93a2af19943cc.bin
.zip

Password: infected
f7ee631c2fa267f48f9c0f556255c0e3f2819c7f5d60f9f84425a8f9aa75e09c.bin
.dll windows x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 811KB - Virtual size: 810KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ