5524a81951a9c7cccbe14b33e1abba4d[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5524a81951a9c7cccbe14b33e1abba4d.bin
Size

643KB
MD5

547761a9da968131d967fc3b703a4068
SHA1

59fd07bd160702fc0f5e46bdc5e7b626434bd94c
SHA256

6b7048fd586128b915c518f33471a99a4027aba2ebcf490c24b9aa196acdc82e
SHA512

7b9c86a9b838b91026148a14af52fed4476fc4cab87ee3e27e45804a0f08bbbd3acea99e2be3280a737a74a244c2901f40b0598a31ac48821717f80fa0938287
SSDEEP

12288:+muXYCjIGN2x130iMqXT0xb7bdqleyGG3/zYZpTew31rQFzpfU/hnNs6RTG2l7:+5XWGN2x1DbXTs7bdOeLG4cCrof+Hs6J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/af87b04b14d627bc90ea099ff27ad3edd61ec1fdeb14b6849651f1c268261745.exe

Files

5524a81951a9c7cccbe14b33e1abba4d.bin
.zip

Password: infected
af87b04b14d627bc90ea099ff27ad3edd61ec1fdeb14b6849651f1c268261745.exe
.exe windows x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 271KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ