efb52a74c4e7c5c007c74d7aa0ea7a05[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efb52a74c4e7c5c007c74d7aa0ea7a05.bin
Size

1.1MB
MD5

4d3402b0f1128ad32f5b06225936de81
SHA1

3b2beceb1fa27a7602a31b17894136146db73626
SHA256

38e1647089d7b3e8db12b793ea73af7072f523cdcadc515b3fa8625597095fcc
SHA512

0300ab266e9c3a920d50b73c9ba601d7b62cef8f14fdcc6e056d3de2c95dcdca6c0745a68e87eeb3924e4c7f87ecd46efc991a2d0483b718a49322d31fab3f32
SSDEEP

24576:JTNsw9e3vDtrCEXOCQcbZT4s3RQB5pgyezIjCjX93:JRQDtrCylRq6yeZjl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c6954e087d2c853eba2def025efff0699ca424f74abff6f34b247518e85baf3a.exe

Files

efb52a74c4e7c5c007c74d7aa0ea7a05.bin
.zip

Password: infected
c6954e087d2c853eba2def025efff0699ca424f74abff6f34b247518e85baf3a.exe
.exe windows x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: - Virtual size: 1.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE