aa2bb0496c17d88c42b677a7402021b3[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa2bb0496c17d88c42b677a7402021b3.bin
Size

3.9MB
MD5

93556c8d5475e6b4f614a7ef982ff01c
SHA1

55fab8331a5e75308481ea079b8c3c757f457aab
SHA256

7d8136cee21e332560547109df880f20307437175fa9df881209443207cfd8f8
SHA512

8361062fe4d804765c9d6d7b4c782175c0ecf8c52a179257cd9e81d2f859ed6896598c0d0a792fe6fb9db95ab715ff7ed1b4fa1f4eff94c0135ab6e8fc6d7d44
SSDEEP

98304:QqJ2EVfSvKz0gOUm0CfZVMVLHAZUetsiqAQ3bK812PM:6mf3LSZqVLYUU3qAnk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/5e75dd408b7957d0ba77a24386535a86ce21d9642f6792b94b24b4e1539e545a.exe

Files

aa2bb0496c17d88c42b677a7402021b3.bin
.zip

Password: infected
5e75dd408b7957d0ba77a24386535a86ce21d9642f6792b94b24b4e1539e545a.exe
.exe windows:1 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ