1ef5ef045fa69218d1bab55bca6cb3e1[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ef5ef045fa69218d1bab55bca6cb3e1.bin
Size

13KB
MD5

28100abb98915df49d0474439901caaa
SHA1

d17792660e4204c9c57c92ad23d62cb355c51f10
SHA256

e7d7b80f65ecc6e41d02b32bdd8c5c6ec007d4b109925aff253f66f619ba63d5
SHA512

a602012ee8842ede6bf9ee49bed7607a3098af3bb25eab3754470c0d1c9f25c8d848dd0d32b7d20362d564250debcf52356b6dbda121dd1af46b94405b7bff5d
SSDEEP

192:AI/6WqmZrTAMI6XzIPQVzvmyaqplkZzYDM4O1vBwqNiMxW/BmUc+27sk1sULTsB:As6yATPYOyaKkN7NiMU/AUc+277NL4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/630e0a12a72e3c6b69bc396b7d7cd84be47fe7f9b60731316cb63c174735ae18.exe

Files

1ef5ef045fa69218d1bab55bca6cb3e1.bin
.zip

Password: infected
630e0a12a72e3c6b69bc396b7d7cd84be47fe7f9b60731316cb63c174735ae18.exe
.exe windows x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ