3ff8b69101e003bccbeb38b0917afdbc[.]bin | Triage

Sharing

General

Target

3ff8b69101e003bccbeb38b0917afdbc.bin
Size

4.9MB
MD5

ff07c98282a92b85addb13ed7667da69
SHA1

76fa2050dd10882a003947630da9d3a177145678
SHA256

a8401b87f269ece624ea00148962de68d7142654b0978a084baa44616a47ce3a
SHA512

69da810dca86d422b12e26ac4bf4e08b80d67319ce82a7ab33690f4db1ef3cd0dd9521caa3f2d2021d51c6b24e3dffd2b7d9f0c3273738b490d575b855c0ad48
SSDEEP

98304:yE3jJVE6c4iuLCTJ8d4sMifjqoB2jEm3SZzdmp7AAW1xGyUnkUdJfV:53sfzkM/ogjN3Sxs/kxG1k8JN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/b1469fb45a4dd130dcbc7ac97b903122f4617f3086a067e2a9e0c88118ed493c.exe

Files

3ff8b69101e003bccbeb38b0917afdbc.bin
.zip

Password: infected
b1469fb45a4dd130dcbc7ac97b903122f4617f3086a067e2a9e0c88118ed493c.exe
.exe windows:1 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ