c4f4a82eeac84a8a0f60996c2e796291[.]bin | Triage

Sharing

General

Target

c4f4a82eeac84a8a0f60996c2e796291.bin
Size

15.6MB
MD5

3d3c90289230e8c38e1dc669947559d8
SHA1

a209daca064e3b1681705fced4834f0199bfd72f
SHA256

e806643f2442720f3b5e94537d33b10878647c727570ae5317336a018ce62ddc
SHA512

da4350d5564e71853e62fa2e01de948fd58533879e2d688a5817d6eadad160d8c866dd9d1199fdb4776422e5f283d4fb794a776f5861970877781e18fc1c84d8
SSDEEP

393216:h/Bg90B9mqByHsxx+jYF2Y1lE5xF/wxsaxVLfP4:hS9O9EMxx+02YLEDFwxsaDw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/1077f50c3d3493b3ea916b7dac608ca5de82c02e8bfc95386d5fe4615cfa85bd.exe

Files

c4f4a82eeac84a8a0f60996c2e796291.bin
.zip

Password: infected
1077f50c3d3493b3ea916b7dac608ca5de82c02e8bfc95386d5fe4615cfa85bd.exe
.exe windows:1 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ