90945fabf33cdfd17f6ddf03891fca84[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

90945fabf33cdfd17f6ddf03891fca84.bin
Size

7.3MB
MD5

871160583ae1f7dee3569035229fce81
SHA1

e9650cfdea5e35df1420c66de20d0596d20764a6
SHA256

aec70d9de9694a09b179c920057b34cab7467419aa684027c0602b4f0be17d68
SHA512

c58af7d3eeac8bcf92e87c1e64663b4a5f2c91e34f87504ad6dbaad6970bbb76da3e4b34242bf98e6ab2c8cd5f66cb4fad97adf721011490e00db439ed727c3c
SSDEEP

196608:A1VWN3+g2Y6F2S7C8N2pMTz6vl+iC831VnJIFkdEWs:4V2+ghgxMaz6v3COVY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c137a0489a7080c6407468d58bb5007eb06dc859f8d0e39b9594dd2c59860995.exe

Files

90945fabf33cdfd17f6ddf03891fca84.bin
.zip

Password: infected
c137a0489a7080c6407468d58bb5007eb06dc859f8d0e39b9594dd2c59860995.exe
.exe windows:1 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ