b70be8632c7ee0e497991efefa42a9ab[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b70be8632c7ee0e497991efefa42a9ab.bin
Size

1.4MB
MD5

f404974640bcfe1974d27d76cecbe200
SHA1

aef5af1f568005ff8998c784ffb00129dea662f2
SHA256

55c9342d2e46f5650380a5d14dfa47f7bf079db121e4d8e636a3ae6e42b42a2b
SHA512

8bd0b2fabc835ca6faae1fc5835576bf4d02ee1d429fb752b41a98b69e38645c4a3dd4b39d27b3b84353a4b51bcaa613c2e19f3d28bffd764ab1c2b2e4bd8050
SSDEEP

24576:goCOUfHBopIan5IeiWwUlpntmynOsyQmzvda6RvKZL/+fEd4FjRnKArGZzd3FKXD:yDho6Je517z4HaYw4zFGZzdCpjSq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/abd71110fb0fd39cbe40f75f4b31cb309f3eede263315094769190dd6b032c61.exe

Files

b70be8632c7ee0e497991efefa42a9ab.bin
.zip

Password: infected
abd71110fb0fd39cbe40f75f4b31cb309f3eede263315094769190dd6b032c61.exe
.exe windows:6 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 259KB - Virtual size: 10.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 179B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ