efeb409d7348a8ddf4edf55f338a337b[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efeb409d7348a8ddf4edf55f338a337b.bin
Size

3.7MB
MD5

04762c5f25da7926b1d7e916a75279dd
SHA1

252a0a94ccc478339d453c591c95529140ba7ba2
SHA256

176d3a59aa0d6f30fb8800596670503dfc3f846557e66938e107bead0ee1459c
SHA512

f7d71e7547b5f19524b063c6e9bfac0da1ae6e9ba996925a51be0c2378841bd1abd5cd643e01eff3979898ad3e449c9adff7d1ed3dbdcca31165b892d199d36d
SSDEEP

98304:wznnPRe2IuvhHfMAwygBiclPgojNCooeNeBRivkGuo:2nPRes10AZgBVlPgowQNeXBo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a56db7832e5a3bec917ddda893b1137d6a2da4732a0c74ef7e67d9c995ca2c17.exe

Files

efeb409d7348a8ddf4edf55f338a337b.bin
.zip

Password: infected
a56db7832e5a3bec917ddda893b1137d6a2da4732a0c74ef7e67d9c995ca2c17.exe
.exe windows:1 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 542KB - Virtual size: 544KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ