b9ba535bbb784c8a4d5abf51c22eeffa[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9ba535bbb784c8a4d5abf51c22eeffa.bin
Size

106KB
MD5

b9ba535bbb784c8a4d5abf51c22eeffa
SHA1

ba4e33dfbc17d391816f5f9c88916eab83d515b7
SHA256

014467464b0f2e5472f9dc7b28176359946e7f39e1c83a4b4fe7efd85aa5bb08
SHA512

fda0595e5805014b0400c23947f7b94d75bc959f49348589829be0de2ee03bd037cd4fe1767b3f3f162baff34fdf4c0cc729b777531a6e8b0c9f54cf9ef34e21
SSDEEP

1536:5jWsawWtjJTwSIma2pLVEBpcuuFIO2lnToIfPEK:R+JT012RmpcuuP2NTBfP/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9ba535bbb784c8a4d5abf51c22eeffa.bin

Files

b9ba535bbb784c8a4d5abf51c22eeffa.bin
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ