1[.]bin | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

1.bin
Size

19KB
MD5

3c1e4a4a5b22b13d38bf21817837d0f8
SHA1

ecfbd11bf99fa7b9ea62faaa5d331e1afbfeb5dd
SHA256

e0e28b17c7c3b18cdba124543f240b11e4a505f8e1fc26a36040628baa4f953c
SHA512

e719ce1935e99d714a09717c2bb956c83d1e41bc837dbf9b70889373b9f15fdc8c84aef4e493c1c51b5862572307f8515c3962a6f054d984b13bcad26adb0761
SSDEEP

384:tX4KmquLC+ra2K67D2N8iplGWpgLPiqQmjGsuDucgWUTgREvGfZ+MK6jH:tXO70pCMYjGFZgWMkpKg

Score

1^/10

Malware Config

Signatures

Files

1.bin
.exe windows:5 windows x86 arch:x86

575aa0739b00e32c2032647532197737

Code Sign

e4:b7:04:6e:a8:55:f5:bc:23:74:ff:56:85:39:12:d0
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

21/05/2020, 00:00

Not After

21/05/2021, 23:59

Subject

CN=Start Group SP Z O O,O=Start Group SP Z O O,POSTALCODE=31-021,STREET=36a Ul. Florianska,L=Krakow,ST=Malopolskie,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

70:69:58:f0:fb:87:71:e7:ae:1f:54:c2:06:a7:0f:82:4d:80:c3:bf
Signer

Actual PE Digest

70:69:58:f0:fb:87:71:e7:ae:1f:54:c2:06:a7:0f:82:4d:80:c3:bf

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\define path\pahan\Release\SIGARETA.pdb

Imports

kernel32

ExitProcess
FindFirstFileW
HeapAlloc
SetFilePointerEx
HeapFree
WaitForSingleObject
GetLogicalDrives
GetProcessHeap
WriteFile
ReadFile
CreateFileW
GetFileSizeEx
GetLastError
SetLastError
MoveFileW
FindClose
lstrcmpiW
lstrcatW
FindNextFileW
CloseHandle
lstrcpyW
GetTempPathW
lstrcmpiA
CreateMutexA
GetCommandLineW

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

575aa0739b00e32c2032647532197737

Code Sign

e4:b7:04:6e:a8:55:f5:bc:23:74:ff:56:85:39:12:d0Certificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

70:69:58:f0:fb:87:71:e7:ae:1f:54:c2:06:a7:0f:82:4d:80:c3:bfSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 28B

e4:b7:04:6e:a8:55:f5:bc:23:74:ff:56:85:39:12:d0
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

70:69:58:f0:fb:87:71:e7:ae:1f:54:c2:06:a7:0f:82:4d:80:c3:bf
Signer

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 28B