c5352fea4e134e1a8e5e3a220d35be26[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c5352fea4e134e1a8e5e3a220d35be26.bin
Size

48KB
MD5

888453d519dc37a9053de3eaf4cefd84
SHA1

4519ee220192a4329e9b2145766965b1c9334c57
SHA256

178f9eac9df941f34d1844b084decd5fb7542fa6183945cbd59778e2e3badcfc
SHA512

d7a9342f420e367855cdf4152c78d88e8b53a01dcfb2caee88cceb612ee0c81ccbcddb8f229d38b91629d9fe5f6f4596f2b6c50ff952c3a31afb22e557ee5d14
SSDEEP

768:MIewsPO7mwqIh5/mkKUk6b8Fv3kKI/41d5sPkpgOTJPe5s43g0uw53pK:d2JY/mkK2b8dA2DsUFPe5s45538

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3fd90f62078ea1670e2e813d02905b86ac306495840681475787e320a6bba17e.exe

Files

c5352fea4e134e1a8e5e3a220d35be26.bin
.zip

Password: infected
3fd90f62078ea1670e2e813d02905b86ac306495840681475787e320a6bba17e.exe
.exe windows:4 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ