bitrat | decoded_1[.]mal | Triage

Sharing

General

Target

decoded_1.mal
Size

2.5MB
MD5

88b5a5c53a2bb99d70210d71417d8509
SHA1

34a146b5a07e0de765318e867cba74c4c97b1208
SHA256

f19174be65d3cc96e6883e976af0a5c0f7c12c45dad537aefe64c59044653212
SHA512

addd3806c53d96b9d56982b59dc80af8340c6983650f76c5d04e7fba554d748da6d74699b5d305c8d9fe76425e98e7283aaf5414804b46c5841fab5d7438dfa7
SSDEEP

49152:d7y7WIcmq3mw438L7C//pQwIGdEj0Cmv6jPQqYX0TMg4nLPXmZADUG69gKr7BAsm:d77Pmq33rE/JDLPWZADUGer7B+

Score

10^/10

bitrat

Malware Config

Signatures

Bitrat family
bitrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
decoded_1.mal

Files

decoded_1.mal
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 687KB - Virtual size: 686KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ