f5b37331c84ea702bf92bb46d429f777[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5b37331c84ea702bf92bb46d429f777.bin
Size

656KB
MD5

5be15126c72e2aa42ca3d3e9c92926b7
SHA1

9a2706b039215696fd7019929101b4e18068a413
SHA256

3a23b70408d2d14ec8594f2fec6a7f44560a7cb6027c93f8deb4d0c7fe389032
SHA512

4043ef2406c40883a055bfae6248af86f459505cca5a7920da713417399d8acfd310b85c07052801473d7fff5f397fb482d96b685d842569ba5dd64f19f2a06e
SSDEEP

12288:QpmFk98RFzL1yhCS1CiGnBkRZKw22/uQyUVREqNkn1AfOXg6qnWAWbNS:NRdL6nCkRZXJBVDNknE6MWs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c9f192e7d1592bfc56e3209da73bbf5fb8a5fbcfcc2d492dbdddfc60c77a1d20.exe

Files

f5b37331c84ea702bf92bb46d429f777.bin
.zip

Password: infected
c9f192e7d1592bfc56e3209da73bbf5fb8a5fbcfcc2d492dbdddfc60c77a1d20.exe
.exe windows:4 windows x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 540KB - Virtual size: 539KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 496KB - Virtual size: 495KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ