1a64418010134059ba9e84dc19451cdb[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a64418010134059ba9e84dc19451cdb.bin
Size

31KB
MD5

14d4364597a8de2bfde4a4d28a9eb8ac
SHA1

544fa53a34496cc3381130f06dce19a6733789c5
SHA256

e1fd95495bc0e3f29989bac1274778d095c7ecdf9d7eee3b531104d2443e3c7b
SHA512

3ea4ce72bb535b799fd95a5a6008f658e2b2f74575ad10e73f113040e3d1a6511d2a115d2544ef0f4518284ec994a58dc3ef07c357dc2467726b11c0f39f3d2a
SSDEEP

768:YnrfgYaKPl5MIpf89KjLXnK/631CX3Zfhcz4TYuj:YnkY5l3VZrK/6FiBk4B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/b536fa701c63d883c8b561252e047bfc84e0e20164a8fd39368c1ff36ec4a957.exe

Files

1a64418010134059ba9e84dc19451cdb.bin
.zip

Password: infected
b536fa701c63d883c8b561252e047bfc84e0e20164a8fd39368c1ff36ec4a957.exe
.dll windows:4 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

Start

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 71B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ