1f1061767472bf174cb693beb74cfb56[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f1061767472bf174cb693beb74cfb56.bin
Size

85KB
MD5

c336759a4172c6d7498ac1ad218c4c0c
SHA1

6e2101d11739a81fadbe0db202cafe439c84b2bd
SHA256

2fdf919589fa6885c8f822a3ce289cfcc8fe0842147e2d534ae21764de52e5ce
SHA512

aa9df4566cb3a7e9b86c6c62b5836f431abddae7f8363100ec0fe47b522a301ad62acfe4994e9fa2089e8da4fce760598da0a3ece9eeb919fe7af2e03ba4aaa0
SSDEEP

1536:hbjKKC074MTONLoesk8Ya7/1+XYSH1DpB2OUiImehOuefuu10kZJ8GVU:hm708yO5oe98z/AXY8NBvD8efuEHm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1435af294e1f747ef8c8ec07338c82afcca9559916a53125d503a51b3075a168.exe

Files

1f1061767472bf174cb693beb74cfb56.bin
.zip

Password: infected
1435af294e1f747ef8c8ec07338c82afcca9559916a53125d503a51b3075a168.exe
.exe windows:1 windows x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ