e6e867005c2e6b66556589a11d75d56e[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e6e867005c2e6b66556589a11d75d56e.bin
Size

1.9MB
MD5

051496ff6dc971aa5c0d95c8ee5270b5
SHA1

9ea1a529d308077055f2a1d69cd9996e5a1ff3c1
SHA256

88ddce339982c55694dddfe6bd50d9b0126a302743c2981c4c9a8a20e42845c7
SHA512

93b820e436ff43f9e9db420dc01c5dcbbbd72de5e4beb12b4537635e0e21c142b69c52fb8abe55755f9e71eeb77afb6b950492dbc9d51cf9f64afc738a33f1fe
SSDEEP

24576:GFBQkP0g/yV64/89j1fKQPA9tEAXpVK7AF0aAZq4zfyCujkoI/WNKZJOTYfYKJmn:GHPJA6N7bA5caAZrf2vxNAJOEVsTBd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3652761f2b3ca55155e1ecc7c5965e0c688da9142a3328e1248ec07c60f045f8.exe

Files

e6e867005c2e6b66556589a11d75d56e.bin
.zip

Password: infected
3652761f2b3ca55155e1ecc7c5965e0c688da9142a3328e1248ec07c60f045f8.exe
.exe windows:1 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ