7f6b1d531dec123264c363b39bdb88cb[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f6b1d531dec123264c363b39bdb88cb.bin
Size

22KB
MD5

a4de345f82cc6693d72f3dcb73c0e074
SHA1

7dd0705c3b88ad14bf6dd96ab2b07f4e46a7aa04
SHA256

e3bcdfd0028793af0295552300d0b88e6d38ac18b31ebf10e584c26f6b4a5341
SHA512

52b13be4dbbbe70e9751037090aecf656f6594985646fcebaff1d7d15c9374374417c8aa44b92406fb7839acb2b37af06b8365e051fd98eb14af047ea67566eb
SSDEEP

384:FZX6Z2/jWqnA1dnzamdJ9V5BIkYUGHFor+Lu/5j6oBRilZL5JqdOzL74pYFKUuv8:XqZ2arjnjdJ9V5BIBUkGIvjtJZ7GyvR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6c9278e517ed5122a148e13cedd0c58d30ab18924d18e477bab90d10172915e6.exe

Files

7f6b1d531dec123264c363b39bdb88cb.bin
.zip

Password: infected
6c9278e517ed5122a148e13cedd0c58d30ab18924d18e477bab90d10172915e6.exe
.exe windows:5 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 449KB - Virtual size: 449KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ