7fcc1dc3ce97bee84af0aa37369f1da1[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7fcc1dc3ce97bee84af0aa37369f1da1.bin
Size

313KB
MD5

1718eec5019d214d0e8e61a38955baf0
SHA1

71438ea9ec59446a4a2851ad93b830be7161a242
SHA256

fffabf2e484ecea856812eb5a28ef557fc2b80ffa0af06bcb9ed8c1707c1396e
SHA512

7507fce4bf3850960b137d9c50b46d302672f5bd9768f4eed1a1df036007c16f8289e3e7f8521f4cd147039790f4af7c52750f26679b9814018439e4c873cb80
SSDEEP

6144:rxrry+S/pdsk01UiF2EgzWf6URav14tBbTxF4pvg/W3XkhR78x:tXy+S/DB6F2EgKsGtbF4pvWW+RI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cef6ac9db0b924e1099909d7b640152cec535e8b1ac050fa0083609ee6d59d5e.exe

Files

7fcc1dc3ce97bee84af0aa37369f1da1.bin
.zip

Password: infected
cef6ac9db0b924e1099909d7b640152cec535e8b1ac050fa0083609ee6d59d5e.exe
.exe windows:6 windows x86 arch:x86

Password: infected

41482c048643282f0fa54f6385f74814

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetStdHandle
QueryPerformanceFrequency

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetDIBits
GetDeviceCaps
GetObjectW
SelectObject

user32

GetDC
ReleaseDC

Sections

.text
Size: 369KB - Virtual size: 369KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ