bitrat | f3903dd85ea3acf21704a6ef928998a4[.]bin | Triage

Sharing

General

Target

f3903dd85ea3acf21704a6ef928998a4.bin
Size

3.8MB
MD5

f3903dd85ea3acf21704a6ef928998a4
SHA1

482d37879962f66561f52b1a44c0ff5463f4b934
SHA256

2d3004533e5f9a27d3592d3034c75844512950787f05ac4792f7048c67007c3d
SHA512

16314735b198ba5752ac3f69a0aad0f89888e1574970f2df5919a12419049affa47dd1e8a7ee7a94b890fb531187c1ecb9c7e58900d739a8b52b03fbe59bbc92
SSDEEP

98304:d77Pmq33rE/JDLPWZADUGer7B6iY74M/:5+R/eZADUXR

Score

10^/10

bitrat

Malware Config

Signatures

Bitrat family
bitrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3903dd85ea3acf21704a6ef928998a4.bin

Files

f3903dd85ea3acf21704a6ef928998a4.bin
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 687KB - Virtual size: 686KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ