ipes[.]bin | Triage

Resubmissions

25-01-2024 14:04

240125-rdqj4shaf8 3

25-01-2024 13:36

240125-qwb9rsgfd2 3

Sharing

General

Target

ipes.bin
Size

1.3MB
MD5

923a8f1bcd7d16c8c230281651402741
SHA1

31e9115efd8bec1500f98a839b32694823801b86
SHA256

3c236ed09bd03b815429da285eb991e430a7a093717c8dcd34b47cced25ac6e8
SHA512

19344c8aa6c8232e1132213de9dd3e96e064fc32979f0158d220fe09d7c42dac1b2d0e822212cbfae0a6474eb762028d1b2f754bdd1ac36059d1febb65faffa2
SSDEEP

24576:3UG3Pos+euQfvnNSoBsLJGvBtTT1OBLZvu6N0aLUG3Pos+euQfvnNSoBs:3Uy3xBcsBNd6N0aLUy3xB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ipes.bin

Files

ipes.bin
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 362KB - Virtual size: 362KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ