a5c9273b92a1040c1437e7caee92fedc[.]bin[.]exe | Triage

Sharing

General

Target

a5c9273b92a1040c1437e7caee92fedc.bin.exe
Size

41KB
MD5

a5c9273b92a1040c1437e7caee92fedc
SHA1

741905e50120cfd04b9e1741779c2b24b06b0899
SHA256

f43ef0a7b6336e9e6eef6ee9f7049615c6b33b53d402d19fbb0b1575f6c2b1b4
SHA512

ec98717ce0de5a6273ca295a85b97002dbefaaa45dfcec3c4eaf8fbcc4a941601dab17d74a4b47e7adc8ae6961da8c73dd500dc5456a8532b2ed6e484ff2b132
SSDEEP

768:avY+jvuwHq3wmkTrWLGBx7OM05Ylta6+qExhcg2UoZZRS8UOz:avYWvuP3wHTrW6BAC3+nzcg2T1UOz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5c9273b92a1040c1437e7caee92fedc.bin.exe

Files

a5c9273b92a1040c1437e7caee92fedc.bin.exe
.exe windows:5 windows x86 arch:x86

2cf082f78fe51269f192ea43727c71c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
WriteFile
CloseHandle
CreateFileA
RemoveDirectoryA
SetConsoleMode
HeapSize

advapi32

RegOpenKeyExA
ClearEventLogA
GetPrivateObjectSecurity
IsTextUnicode
LogonUserA

Sections

.lyrmb
Size: 34KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rgt
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.twt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fmp
Size: 1024B - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE