a58fc4577a6ad1b5223b74b902ab2a30[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a58fc4577a6ad1b5223b74b902ab2a30.bin
Size

14KB
MD5

32c57424f831a1bd5786456c8af96f75
SHA1

3c3e6d396f4ff4f475356496423dccf772e13831
SHA256

aaecde8fe0bfdaa695cd443edc8856c1f0cdc1a6aa670ff4e35b1abfee829c59
SHA512

ecdf47d0ad6755fab0e0bf965ca2185022b3f6c76e6424189d21825f977916b1926d66c131fd96e3d15806bf73676073ed9e48be756e1c0b7c5b96ed8bfe42c7
SSDEEP

192:DKd0vGDe3gsKHgEV7+4/h0lmGC9lBG5W6vyp2zyIL7+f39PI9cGtO1cq2:C0+DeoZEIgmGCWyULA3qcI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2ea59dfd6ea0663e384552cfd224bec8ffbd67c6b2dbd815401bd9e835f1b015.bin

Files

a58fc4577a6ad1b5223b74b902ab2a30.bin
.zip

Password: infected
2ea59dfd6ea0663e384552cfd224bec8ffbd67c6b2dbd815401bd9e835f1b015.bin
.exe windows x86

Password: infected

699cc9570c233cf12692f95447a4cdc0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

shell32

ShellExecuteA

msvcrt

__argc
__argv
_environ
_XcptFilter
memset
__set_app_type
_controlfp
__getmainargs
exit

kernel32

SetUnhandledExceptionFilter

Sections

.text
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ