b60a096d39e4a323be6c97b0df63d41f[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b60a096d39e4a323be6c97b0df63d41f.bin
Size

8KB
MD5

b60a096d39e4a323be6c97b0df63d41f
SHA1

ee68582ab70d0a32ba245a8edba0d7105db4e9b4
SHA256

b582ae1c310388d0a7e60664bf8145defa2fd9b61f346c31499efc238982c9cf
SHA512

ccd1c6c7cb6789fc596561c322e443d9b152e5a071e404fe77641bea8afeef87f8b0b8bb58449841dc431ca17acc243638c29b3ab8956a141fa324c528a28880
SSDEEP

192:9VhZEcreyGq6mRGEcJhyeXA7RMLaEn/oYJ8RL/gE/ZicytL2EK:9Vh2creW6IvUcMLjQYed4EAcytiN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b60a096d39e4a323be6c97b0df63d41f.bin

Files

b60a096d39e4a323be6c97b0df63d41f.bin
.exe windows:4 windows x86 arch:x86

293d74517abaf06499f67f1f4e02296a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CopyFileA
CreateFileA
CreateMutexA
CloseHandle
CreateThread
DeleteFileA
ExitProcess
GetCommandLineA
GetComputerNameA
GetLastError
GetModuleFileNameA
GetProcessHeap
GetTickCount
GetVersionExA
GetWindowsDirectoryA
HeapAlloc
HeapFree
Sleep
WriteFile
lstrcmpiA
lstrcpyA
CreateProcessA
lstrlenA

ws2_32

WSACleanup
__WSAFDIsSet
accept
bind
closesocket
connect
gethostbyname
gethostname
getpeername
getsockname
htonl
htons
listen
recv
select
send
shutdown
socket
WSAStartup

shlwapi

SHGetValueA
SHSetValueA
StrToIntA

user32

wsprintfA

advapi32

GetUserNameA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE