a5ea08e8379cb4e6a65d3e32e0a37f22[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5ea08e8379cb4e6a65d3e32e0a37f22.bin
Size

49KB
MD5

a5ea08e8379cb4e6a65d3e32e0a37f22
SHA1

35f66fd4235bdc67e0c0d903fcdecb765fd57fcf
SHA256

2045f672b1a46b6fac3ff0d114ed3968853746975d9379d2b86579a20f5502ee
SHA512

810b2abc91e59724d2550c81f9d3e5ecf332b874b6a7e9bd7caed045fc924d5f3614ddc1227189ef4f22631e9a724dd9329fe7b77f566e81c9b7860851144516
SSDEEP

768:btB9g/WItCSsAGjX7r3BPOMHoc/QQJP5wjvaHYwiq8:btB9g/xtCSKfxLIc/E1a8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5ea08e8379cb4e6a65d3e32e0a37f22.bin

Files

a5ea08e8379cb4e6a65d3e32e0a37f22.bin
.exe windows:5 windows x86 arch:x86

a2bfa209044e11b72a41f731968fdff2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
PostQuitMessage
ShowWindow
UpdateWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
GetMessageA
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ