264b1e130d3e3f17888aeb24df0f67f7[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

264b1e130d3e3f17888aeb24df0f67f7.bin
Size

6.9MB
MD5

43a9d0e4df576a3d10d4941a4f6ad438
SHA1

07a14cb1500f11cf12866a8b572d38aa01d7ba60
SHA256

3a4faef810e36c1482325d51e90135749409d88b3dc6050fb0c56098e2917163
SHA512

a4845a11361f6d14ce60cff21a8b1755fe568d144cf2c60bb794a35cd931b05770db4e38bb3a4cca873be2815b08e31ecdc96e37649f2f16840344ce3b5fa5ef
SSDEEP

98304:kXoref6qSoK2DR56egHiAv8OTZuSlPc/ZqCwCIHFu4Y3qL3tS7NUx0PfskXdjiHR:uojonj6egTxk/kF9Y3qJSxU2PfHwkC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/02c0e018e24e9e9c7b040f3e6b6d8fc191275c7e267b046e189acf03daaff5d4.exe

Files

264b1e130d3e3f17888aeb24df0f67f7.bin
.zip

Password: infected
02c0e018e24e9e9c7b040f3e6b6d8fc191275c7e267b046e189acf03daaff5d4.exe
.exe windows:1 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ