ee492754bc08d5594c6bd6333d139aa0[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee492754bc08d5594c6bd6333d139aa0.bin
Size

66KB
MD5

ee492754bc08d5594c6bd6333d139aa0
SHA1

bb0d773c22ca34ab6d40c10a1fdba6c1ca954668
SHA256

396d61c87494b1ef0d23d1c513dc4a6c260c8397e08fdb82978456f62db86a3e
SHA512

082b5dc541feae895dcb8277b30df5f3bf045fa0578d408084e7910e760f18e4b5c37bcc6187dd72772a244899467a385111041a84fbe6fef54a2e582dde5474
SSDEEP

1536:EstC1L1OMvJEzHS3uVZb5x8meI0fPJt31QXPQmXS7TK:ED1Lhvf+n5x6IKPJrQ/QmCXK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee492754bc08d5594c6bd6333d139aa0.bin

Files

ee492754bc08d5594c6bd6333d139aa0.bin
.exe windows:4 windows x86

a30a2c00495739e8288c4bd2c2befe2a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPackageFamilyName
GetProfileIntA
GetEraNameCountedString
AddAtomW
WaitForSingleObjectEx
RegOpenKeyExA
GetProcessId
FindAtomW
CreateEventExW
BasepAllocateActivationContextActivationBlock

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE