891cb442484c2fbde98cdc96ec19a1f1[.]bin | Triage

Sharing

General

Target

891cb442484c2fbde98cdc96ec19a1f1.bin
Size

250KB
MD5

4b588638cb82822bfc57d2772e2b0534
SHA1

8e1bf3aa7704df95360e74ea570b1bf6a7a258bd
SHA256

3a4acdd0795c204c1184bf7ae8585cabdd933d32072ee5d23c8a8f14fe83f6ef
SHA512

726c0a5d1c85eeb6fc5a7386de297f584b2f0a14de1857c4d713a63f88e1fd539d676070904365cac395649cf0c1cc00beac4108fa68007dbeeccff126b2ebe6
SSDEEP

6144:iESwFffVRPXbSMnMKavaTF0JvEguB7eN6PYuRw0mBpU:kmfVHM1vC2cRReN6QRHBpU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/016c02b11ed14355d4b5463e31ffaf232753bf8756d796b23347ea1ed406aa1b.exe

Files

891cb442484c2fbde98cdc96ec19a1f1.bin
.zip

Password: infected
016c02b11ed14355d4b5463e31ffaf232753bf8756d796b23347ea1ed406aa1b.exe
.exe windows:4 windows x86 arch:x86

Password: infected

4d23fab0881f56a7049de46ea1641459

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord609
ProcCallEngine
ord685
ord100
ord616
ord650

msvcr100

strftime

Sections

.text
Size: 488KB - Virtual size: 485KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE