b66bc6f603d290278f1a4298d970e52e[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b66bc6f603d290278f1a4298d970e52e.bin
Size

5KB
MD5

50c09603f11477cc6cfd0af13c8c0484
SHA1

aafbc08f67e1c2310bb1393adf66e365ea52e0d3
SHA256

38d34eed41e5c8b5d134e914fef09411d135d6601c7f859737c598c738fe079c
SHA512

4e7c471529943f5fae916fac0b4787361fe4d984b18ad362b90b7cdf1f704495962a568bd52e552465c6142741a648a720910500e1dffa12491baa4a4e458f7f
SSDEEP

96:LQwWrQBU0Dv+JJFHt/pv6J+NLc/RkZ8P6E5qIGxQu+V9vRWax3k:08U0r0JFN/FNLcpkZihjuGZm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6ac71544bd8c403ae8c4a097c6bd00648d765fae211dbf5df1838bfdd07ccb20.exe

Files

b66bc6f603d290278f1a4298d970e52e.bin
.zip

Password: infected
6ac71544bd8c403ae8c4a097c6bd00648d765fae211dbf5df1838bfdd07ccb20.exe
.exe windows x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ