zvgmVV2fDYfPKjzIgydTNqm9UyBlB3jMwaSRcDL5phc[.]bin | Triage

Sharing

General

Target

zvgmVV2fDYfPKjzIgydTNqm9UyBlB3jMwaSRcDL5phc.bin
Size

961KB
MD5

c060d0e8c25968d841367fcb00bac7c4
SHA1

b669dc31ff97511636fcaeab13877efeccd2dcbf
SHA256

cef826555d9f0d87cf2a3cc883275336a9bd5320650778ccc1a4917032f9a617
SHA512

01abbe91bd2a670a6168d3ba65e502d3306d28132a2846182145fff0c84d38e89699e3c5c4845ac1359b5c254e1cd2ef575e299e80b4e88d78880bc2f1fdc715
SSDEEP

12288:0GF/lH/vUel9re8ozvXOK87vqEir6+m9fj6U7HYawH4gVNRjxGNHuwcO:0e9vUe+8o1yvuG3j6UUfYONlx8OD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
zvgmVV2fDYfPKjzIgydTNqm9UyBlB3jMwaSRcDL5phc.bin

Files

zvgmVV2fDYfPKjzIgydTNqm9UyBlB3jMwaSRcDL5phc.bin
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 421KB - Virtual size: 421KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 493KB - Virtual size: 493KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ