af9f73983a12fa8b2dd62c962e28ba7a[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af9f73983a12fa8b2dd62c962e28ba7a.bin
Size

6.9MB
MD5

57be59ac82874c1e6e2609655ae54832
SHA1

46a23195ead3ba02a94a320de16427834aaed168
SHA256

86746791ad7dead9b6e14929745382c08572c48e085d8c96ca5b16f0f7a7e3c7
SHA512

6f3496b8bd02eff17d41ad47050f8e8ae279fa8aed0171d483730a9ff11f2aa1bcdf5810c641a78d8647c4014d973c93e8a5b579b97838ee62f808e2f5c00e77
SSDEEP

196608:NjBf4u/sinId+XZocIICqUnuosm8HhMnWR9NMFPEji:Z/7USCcIICqWuvf9NMFPF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cf9e35363e0b3732c9a2a36841d04400c51fa2be3845d68aea71d491397c200b.exe

Files

af9f73983a12fa8b2dd62c962e28ba7a.bin
.zip

Password: infected
cf9e35363e0b3732c9a2a36841d04400c51fa2be3845d68aea71d491397c200b.exe
.exe windows:1 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ