341edb9d58cd37043107d39849e09aba[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

341edb9d58cd37043107d39849e09aba.bin
Size

6.2MB
MD5

b32e08c84ffbf5a5f0aaacb47b6e16f2
SHA1

2363b8ac769453c5084008c41d6289027589588e
SHA256

b2bc6c2014b870e30fec68e08d8d407fc732e062d0ae69edda1745f44020ecbe
SHA512

22931a0c27f77c5ac966c36e1dd5523a1c69673ec961afe0ad1b410532b3261dcfea25db6debc3e4d1d252dc86da06ae4736f8cc59a58853aae2dbf6bb3a4ae2
SSDEEP

98304:eFYye6R+sp9Wrn8PciSJ8kKHr+p5iY7J86MF+L1yO4F2Pqpaa/Vx8eXXVBrQj9:x6RxlcjXKLAiY79S+xZs22aUlQj9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/5e2bfc430cd10ac7ba31f6d5e2051abaeabe9b5912c3ed8e4d3b87bf48a8154e.exe

Files

341edb9d58cd37043107d39849e09aba.bin
.zip

Password: infected
5e2bfc430cd10ac7ba31f6d5e2051abaeabe9b5912c3ed8e4d3b87bf48a8154e.exe
.exe windows:1 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ