abb84f7bbcc5585765153cd445c8c07d[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abb84f7bbcc5585765153cd445c8c07d.bin
Size

640KB
MD5

6e43f97edff7986f241194e36060bb9c
SHA1

33042f20a5573d052b5c41f4a3c04e8dd99d4adf
SHA256

e50a5fdc20371fa859ee78644d83db285244eb44ccda9ba7e236faa583ee4b32
SHA512

47419af367c2db4fb6d1a32e140f756770320b1dcda06b9d4a980f86246a5f9bffb8637e0c4901d7fdcc2d88d913aac7a9bf6aa567cd2c6e862a8e967017604d
SSDEEP

12288:dwRbAiXO5ppPw5V7NyZXLO5dWQx63AdQ2VrQfYwG1d3BJtke:GlAKp3ZuXLwIQxK24YvBJtke

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/149e9d049c83abff4843e0fab7f6cde552aef61e32a53d61e76f6c5adc3db25f.exe

Files

abb84f7bbcc5585765153cd445c8c07d.bin
.zip

Password: infected
149e9d049c83abff4843e0fab7f6cde552aef61e32a53d61e76f6c5adc3db25f.exe
.exe windows:4 windows x86 arch:x86

Password: infected

a9c887a4f18a3fede2cc29ceea138ed3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

malloc
memset
strcmp
strcpy
getenv
sprintf
fopen
fwrite
fclose
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit

shell32

ShellExecuteA

kernel32

SetUnhandledExceptionFilter

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ