041223b1226d7009e411fc4d8513c199[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

041223b1226d7009e411fc4d8513c199.bin
Size

340KB
MD5

202c422fcb0d20289e58f97bc10df496
SHA1

29752f9cbea025dbfb27791d523be9bee9373de4
SHA256

164ac65cf24826cdfd4e6ef786539a78917616668663130a9c466d6c2014051e
SHA512

4a333172c1c057b14954c8d206d4813ead5e178b7dfddc8ff6136daba577f0d82f85052fb56bbad31e993a921329ed4146feac2390345b33356eefae41104500
SSDEEP

6144:lD1+Xf0cfprmKbV11Hytx5UZNMyTXV1lpUbuhrBFXUIDwQXQtdF+5F5u1+jdZrhK:lZ+P0cfprmKLpytwIIX4buVBFXUIDbXQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f4925519bb00f9664484adad210ba2884c1ddaee649d76d91e01f8bb172676d7.exe

Files

041223b1226d7009e411fc4d8513c199.bin
.zip

Password: infected
f4925519bb00f9664484adad210ba2884c1ddaee649d76d91e01f8bb172676d7.exe
.exe windows:5 windows x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.brqwzx
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 533KB - Virtual size: 535KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE