b89cc5fc99d7564cd1a614f55768fd5d[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b89cc5fc99d7564cd1a614f55768fd5d.bin
Size

2.2MB
MD5

fc667fd7f0b25bfa3c881e81825284d8
SHA1

0cf358702627f335a8bcc53aa8d8afa010b33e74
SHA256

f9c10817a51c2bec38c2c0f1f9ca58e9faab8b4377568567f42198befce03abe
SHA512

965ada64a6d68c658cb98315d5eb2072895b5269f399023b9bb9ce2ac7fd4b808367f6ef54a47c5d087ba6c4d99acf987088bf3040243fa64a3c42312e449dd9
SSDEEP

49152:UoEA2+jvUaHpu5/TJ2/1OGNI5QH+0WscA8OKIAIVLldNTeRtk64+Pq4r:5EAnjtJuNTJ/Gi5QH+0WfAPjVLDNq4bo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/eb8d68df57144bcdcce216ce6d9ed34748a1032ff930eb10080b87087c03b81b.exe

Files

b89cc5fc99d7564cd1a614f55768fd5d.bin
.zip

Password: infected
eb8d68df57144bcdcce216ce6d9ed34748a1032ff930eb10080b87087c03b81b.exe
.exe windows:5 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 7.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 519KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kn<
Size: - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.mPR
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.^!9
Size: 8.4MB - Virtual size: 8.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ