316f2bbdf27ca222779668d9b170bd4d[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

316f2bbdf27ca222779668d9b170bd4d.bin
Size

760.9MB
MD5

316f2bbdf27ca222779668d9b170bd4d
SHA1

cd996e5efe9a6bdeef83570b4da673882bdee76a
SHA256

1e5913251c594df3860a0c9365004f4bfc6319b122afd40af9dcf281b7215195
SHA512

45d7737e0dda80205de1440b5183a6e8727475c5d31c78f55724114388577db92a59104cd882d21858108a7428155d8bc08a5eab61af422dd167b3f0f05baf70
SSDEEP

12582912:TbJUzBwhocGkdxdVKWVhRPlAZKBJYc7SHWebpyDfMJRa8AAvAHNAMqTb2bptQBCq:/JULkaWPRaZSazldafKaPtAMuCQYkEJ4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
316f2bbdf27ca222779668d9b170bd4d.bin

Files

316f2bbdf27ca222779668d9b170bd4d.bin
.exe windows:6 windows x64 arch:x64

e81509ea25035b4144f6b79db66f0d62

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
GetModuleHandleW
GetTickCount
GetModuleFileNameW
OpenProcess
GetLastError
DuplicateHandle
GetCommandLineW
OpenFileMappingW
MapViewOfFile
SetEvent
UnmapViewOfFile
CloseHandle
GetVersionExW
GetSystemInfo
VirtualQuery
GetCommandLineA
CreateFileW
CreateFileMappingW
GetFileSizeEx
VirtualAlloc
VirtualFree
LoadLibraryW
SetEnvironmentVariableW
ExitProcess
GetModuleHandleA
RtlAddFunctionTable

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xcpad
Size: - Virtual size: 11.0MB

.rsrc
Size: 402KB - Virtual size: 401KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ