381fa745ec5c881a721e1e992c177305[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

381fa745ec5c881a721e1e992c177305.bin
Size

67KB
MD5

592f01ad4b24491f4d987d2ee6cd0a0f
SHA1

feaa80d02be276ba174df571a459be9c153e066d
SHA256

f5af26a067949151c80833251c785905ec8300f00086178ad5c0b2bab69be349
SHA512

6fc3dae4f3da052baeaf150b9ade2a94a918a64b18fc76a9d8b78c591f50d97d14b6ccd3e6ae23202a1be9cb229e07083016b8ddb545e6ac57d7abe367d7c0cc
SSDEEP

1536:Eur3mdxEPGh76isW5ZGiwW4OX0z7Q1wlXp6YaJufVV:5mMPCeipGiJBk1Xp6YPdV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3054cb557781a24975e1da913001c39614b179c6756a27a3c8bf870f157f7444.dll

Files

381fa745ec5c881a721e1e992c177305.bin
.zip

Password: infected
3054cb557781a24975e1da913001c39614b179c6756a27a3c8bf870f157f7444.dll
.dll windows:4 windows x86 arch:x86

Password: infected

24a9d698157614300b4f12a31e0a92f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

crtdll

memset

kernel32

HeapCreate
HeapDestroy
ExitProcess
GetModuleHandleA

Sections

.code
Size: 512B - Virtual size: 143B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 30B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ