6e5e356dbf9165782bc336703a9d9487[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e5e356dbf9165782bc336703a9d9487.bin
Size

170KB
MD5

6e5e356dbf9165782bc336703a9d9487
SHA1

d697dc650c2c9c42ea2142d7507e4dd95ae07fd8
SHA256

fbd60fffb5d161e051daa3e7d65c0ad5f589687e92e43329c5c4c950f58fbb75
SHA512

705b57768bebd177588548988ec3cfd8990c50d9da5763e11a6f7adb1be67abf8e1688a7565a7cc0b4b737353abeb7c85921c4a25fcfdb0cd9d5bd1aa74203d3
SSDEEP

3072:WTBocC59ohgWr8QmWnMFtiUMWellix1Nex6b:556WWn5UMBCx10x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e5e356dbf9165782bc336703a9d9487.bin

Files

6e5e356dbf9165782bc336703a9d9487.bin
.exe windows:6 windows x64 arch:x64

c0b5930360a760ed4a94825f717ad4e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

ResetEvent
GetTempPathW

Sections

.text
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ