bin2hex[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bin2hex.exe
Size

26KB
MD5

9e9f866af47fb27906e1b30b601ba6bf
SHA1

e58de77f65c963141057c2d062184ee79dc58911
SHA256

1e098d39083da77015e3a3fa8847beef14efa6f93a413504234c91d5cfc789a0
SHA512

80b0d7542e402c5de165943f5800446cdebd726dbd06c924a4e5e7e423afe217e45c98e977126b6d0988c4a0e02831015ca27f28cb35f0e626255e17cb16e2bb
SSDEEP

384:5TtVXqLMBp+HbHBZlDRB+R4Z7NoxxKEkG1jFKvy:gLMBp+7TgRjx4dy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bin2hex.exe

Files

bin2hex.exe
.exe windows:4 windows x86 arch:x86

9bf99d7a8681e2bc0f84c17056c676a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p___argv
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
atoi
exit
fclose
fopen
fprintf
fputc
fread
free
fseek
ftell
getenv
malloc
printf
putchar
puts
rewind
signal
strchr
strcpy
strlen
strncmp
vfprintf

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE