1d66d7ad7e98ba61ffc125ae2aef981c[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1d66d7ad7e98ba61ffc125ae2aef981c.bin
Size

1.5MB
MD5

577f1d63041425f76ae371f52680743c
SHA1

acb67d1d8b3d49a9458a2326b5fd07d93e1c0722
SHA256

1cfe6c7bf0f7e017978be7fe3417bbee14212aebc6b8af936e4acfe4bcbf7a28
SHA512

8f9bb79c6bc1d40b597d1121e968b7b58d3a837b9e402d747637bb0f212501e88d0f6d5a6eca9bf1cb88a0fc06500717981a0902c9e805029b4ad55f4dd1b1c1
SSDEEP

24576:S55KqYxTOeInKq2tyzmDWeJA4M6xdFzU7hzsDefWQW7G+WBYrwgtSB3Ok9erCV54:jDhAKu6DWeJA4vFIdgefoq+3rwOSB59+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/bc20eee6cd6864feae6f1ea325c2b2b4a64e892d2bb3f7d28ac297fce6d406c4.exe

Files

1d66d7ad7e98ba61ffc125ae2aef981c.bin
.zip

Password: infected
bc20eee6cd6864feae6f1ea325c2b2b4a64e892d2bb3f7d28ac297fce6d406c4.exe
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1.2MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ