348c2b944a42488f81f18c149bd163d5[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

348c2b944a42488f81f18c149bd163d5.bin
Size

90.7MB
MD5

348c2b944a42488f81f18c149bd163d5
SHA1

ad0b4a4b7b041b39667c165e5f4fc7d7ff694c10
SHA256

3924ddaa4c6aeadb2313ab5ed8e8b4fec9d1b6f5f30d1ec90092ce814d11d942
SHA512

3de8b8c56f8628dc91f64f191a04ca401c6445691016546bd45c5dc6e658576f64727388ee66a5935d3857e4d52a5fb89465a411b8fb903cb105c02ae1d3ae83
SSDEEP

786432:QlufTZJUa6U2cg4nucnE7un8TfzG0ZuPhMilT7R+LZ+urCoGqiWxw6YFqjEheL52:yuzf2cLjkWUCZsoQiFUA1W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
348c2b944a42488f81f18c149bd163d5.bin

Files

348c2b944a42488f81f18c149bd163d5.bin
.exe windows:1 windows x86 arch:x86

140094f13383e9ae168c4b35b6af3356

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
GetComputerNameA
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
SetErrorMode
Sleep
VirtualAllocExNuma

shlwapi

PathFindFileNameA

msvcrt

malloc
free
memset
strcmp
_strcmpi
strcpy

Sections

.text
Size: 90.4MB - Virtual size: 90.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 297KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ