bbcc06f62672ad441c660c21fe0306f7[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbcc06f62672ad441c660c21fe0306f7.bin
Size

4.9MB
MD5

25325aa5005dd45a72f0f5293d2a1a2b
SHA1

3710d9a333dfb23e325bb3ecef4e24d2ac948e80
SHA256

d649cead536c433d7619f1af9da886d3d5b7d8fb4a5786e615dae9c1abe31898
SHA512

09f7e92edc954e95480d46792ab6b8575e6ffa97fa049e6f6db4f0c0aa09d819c49d25bff84edc0c9efae4235e98148a10e83e7ea5800981d46ab7d402499ca7
SSDEEP

98304:CO4tDljpwgzqqzuZ65nosuu+4W+tg8ad85ngA8gkaS+xJ9jG3mtD:CJtD5pSqyZI1mmEQgAvhjGK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/8fc0b09eeeed3341b10d954422cf92f2fba9bd51d88051cdcad13af0b92f43fd.exe

Files

bbcc06f62672ad441c660c21fe0306f7.bin
.zip

Password: infected
8fc0b09eeeed3341b10d954422cf92f2fba9bd51d88051cdcad13af0b92f43fd.exe
.exe windows:1 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ