a62abdeb777a8c23ca724e7a2af2dbaa[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a62abdeb777a8c23ca724e7a2af2dbaa.bin
Size

1KB
MD5

0793d85b21c7910e9c73dd627883f8bb
SHA1

6b3bda8926ab0a8a27dd42dfebfad935ad2f730a
SHA256

2caef2b80ea97a7342b34ede52bfd2f173a7272d61096de4093a7a6faae6cdec
SHA512

756ec40589ec40e8d2721357cce5565ba748d32542cc7a3661db3c8e68de94d18a7ef0d54e0f2b4d9f55e51e1bbbd2550622bf6342a21b27021d07bb9bf25aa7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/84bde93f884b8308546980eb551da6d2b8bc8d4b8f163469a39ccfd2f9374049.exe

Files

a62abdeb777a8c23ca724e7a2af2dbaa.bin
.zip

Password: infected
84bde93f884b8308546980eb551da6d2b8bc8d4b8f163469a39ccfd2f9374049.exe
.exe windows:4 windows x64 arch:x64

Password: infected

b4c6fff030479aa3b12625be67bf4914

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jvgc
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE