96ab150919900f47f35b9788b5ad926b[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96ab150919900f47f35b9788b5ad926b.bin
Size

201KB
MD5

962ecab3e3f9458f0aaddae913ec20b6
SHA1

6ee0986557927afd748ea4081d416ad9eda003d2
SHA256

7c3f5a12390b77bbc53e7db521d6c4bc68cb6b2d2c7c08147d8eb357921c0893
SHA512

53d6d1e26c1d536f3d934c9356625cc496e6f250171c39771853790a7209e6a9150b9115133d8dd63b0f774216c0647adb2a88de155de0736129d4e9799ce3db
SSDEEP

6144:TIqSyITr9kNCndClN+CBcvKm7lrek/5/mJd:kdr9uCAiCBiKvMwd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/30785c12afc5ff197e2d743bc307a7a3def878959c8998ffbdd9548c3c95b13e.exe

Files

96ab150919900f47f35b9788b5ad926b.bin
.zip

Password: infected
30785c12afc5ff197e2d743bc307a7a3def878959c8998ffbdd9548c3c95b13e.exe
.exe windows:5 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 449KB - Virtual size: 449KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ