7b9f684059e6b84764f01b64c45eb828[.]bin | Triage

Sharing

General

Target

7b9f684059e6b84764f01b64c45eb828.bin
Size

6.3MB
MD5

b2c10e83b7c784c1a0bacf3329965357
SHA1

ac6b03e87cdecd89b38c3594941aceaed2ce048a
SHA256

4c07ececc0a1612cfcbc84a71e16fee89e8f333207840b03d510510bd6fc74f6
SHA512

56a31080a79bab8f1d21bc6e2d280240299c9b27643dfd474348ba8f12d01af20c2a06e7415fef22edd9d42f2eeeb28c5b0bf713b46569a43a7e9d7ce79e4be1
SSDEEP

196608:+sSTlc+hYPfM8NFn9Uqggr49DDMtaYITrA2:UTqhPk27N4lYaY0X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2f145aa84376fb1c39f3026a8e7fa62841188f92a7b4af0926df217347c7102f.exe

Files

7b9f684059e6b84764f01b64c45eb828.bin
.zip

Password: infected
2f145aa84376fb1c39f3026a8e7fa62841188f92a7b4af0926df217347c7102f.exe
.exe windows:1 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ