a0fe5b52e1f51fdd99657726f0176ee7[.]bin | Triage

Sharing

General

Target

a0fe5b52e1f51fdd99657726f0176ee7.bin
Size

323KB
MD5

bf1a451bfd397578617bfa1ebdaef469
SHA1

ed94128a90a56f78b0bd405322a17c52fd62bec0
SHA256

3cb7d232590c3cc662724d95207dc20fe500a9f943457216af959f417e19b8cc
SHA512

de67b845bf9371037f851194ed6fd4f037d65d12c49b00fd91f5cd926ecf854052440d8636b99333faa02ab43817eb2f273842b53eb60c9ef8d87262443ca908
SSDEEP

6144:QCECNN5Mup8kqtp2Yiav8qEPLFr+FOXlZ5lT49o1IiPlNuLfXTCtjgjcdPC:QCjguiYYia0qE8cVrlM9o2AmTCtMjcRC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/9db91e72a168e58a97153f17006046fd3cf7dda6487b3a4787567e1c8448377e.exe

Files

a0fe5b52e1f51fdd99657726f0176ee7.bin
.zip

Password: infected
9db91e72a168e58a97153f17006046fd3cf7dda6487b3a4787567e1c8448377e.exe
.exe windows:6 windows x86 arch:x86

Password: infected

01872e6ee81c2a9c5c63c0d52462fa63

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetStdHandle
QueryPerformanceFrequency

user32

GetDC
ReleaseDC

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetDIBits
GetDeviceCaps
GetObjectW
SelectObject

Sections

.text
Size: 385KB - Virtual size: 385KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ