8f5b4c533ec8304959e80dcbc7ea18d1[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f5b4c533ec8304959e80dcbc7ea18d1.bin
Size

347KB
MD5

85a82f71e3c411f2886eb03128a79130
SHA1

e905dbe3117ad955d401bc94de572a4f7dad9c3d
SHA256

a52a083e43a15cf369532475ddfe602db6d02fae39c317afa7c11187c1eca91d
SHA512

a316e1a79c612e484cc8360c4d32b97442bc28342be285a18dc18317d91a6a868ecdb2f167afe0ca43e870eb30ca786c9f5393e8cc9659e0b14123f09db9fe19
SSDEEP

6144:coGflwJQYR1L9+8D4DxgJQsGH23VvupGZ9ebsmTKkKrd3/GqYrt9xAOvgU:rzirC4Dx923VmpGKrKzx/GqK3gU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/90fdcd6f5153d6162ee866143cd0f11f662c5405bbe82a0d2a9fef38ec3d8f01.exe

Files

8f5b4c533ec8304959e80dcbc7ea18d1.bin
.zip

Password: infected
90fdcd6f5153d6162ee866143cd0f11f662c5405bbe82a0d2a9fef38ec3d8f01.exe
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 624KB - Virtual size: 624KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ