22e35bea6a2653c8393db13a83b0cf97[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22e35bea6a2653c8393db13a83b0cf97.bin
Size

43KB
MD5

117356f59f4dbd03781dbe2abd3cfa9e
SHA1

838368066d785fc85d6badb01f6ef4284d8f4c27
SHA256

f0cbbc9f2b0c5c8c92c9c3a6cd8f38d9d002ca9a4aa7961e707c0d6e88556ac1
SHA512

718bac9403a12a47cbcda5e45bea66a95400ddd089cf6dcdeb4f50fac0bebdf114c329d45697e355446312c1928f4689d3ae7290b44a62b995954cef4d83d59c
SSDEEP

768:TkvBspqm/OYZjVyoRjh8oF1HaAcHPBq2+Xii5fUTN4nR1M+13V7i+52OAOae3g:+BPm/rZjVy8NJ6AIpq2+SidOlv+UOPNw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2e8af331adb9cd46185ae5f7982157267ef3c6e4ccdd943226ee5aec8455fae8.exe

Files

22e35bea6a2653c8393db13a83b0cf97.bin
.zip

Password: infected
2e8af331adb9cd46185ae5f7982157267ef3c6e4ccdd943226ee5aec8455fae8.exe
.exe windows:4 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\weckb\source\repos\Hider\Hider\obj\x64\Release\Hider.pdb

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ