047324921fcd5ca64134a367d389e900[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

047324921fcd5ca64134a367d389e900.bin
Size

456KB
MD5

8c5dd5107cee4940d503ca694ece369b
SHA1

0da0861d6e1a63181a0f948adf84742299daa222
SHA256

860556978d59516ef5a008107eb221182da94fb16b805f6459c79466e83806cf
SHA512

b758ced8c7f1be921c0adcd8a0b1cf70be502a0d16ec9da00426b001ce89e7bfabe13c60479d197f6d77fd67b502a0a9aa856c3d2dd59ebd4e0e7c50f7c35fd2
SSDEEP

6144:7TrRJVUtvz6MCP2plfBVUutK0gQ0G+dZ9ELuVxkqGL2LDanBiFQo76lC4Oi6erPa:7POBCknVUuiQ0G+lbDMBiFBO6erPkt3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/34a8af0af0e818443b87f59fcbb5c10af500f1b45c9b3d1e7d6aecc494d009f5.exe

Files

047324921fcd5ca64134a367d389e900.bin
.zip

Password: infected
34a8af0af0e818443b87f59fcbb5c10af500f1b45c9b3d1e7d6aecc494d009f5.exe
.exe windows:4 windows x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 452KB - Virtual size: 451KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 535KB - Virtual size: 535KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ