1eab47264a2f9ded2e6e3ca2a265176d[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1eab47264a2f9ded2e6e3ca2a265176d.bin
Size

605KB
MD5

2b3031942fac3759284ba271db4bc125
SHA1

11f800cab9ffc5503d718ac0513d6b73926fa3f7
SHA256

070092b5a3718e0b964021701f4bf0303ee7446f6a9c234dea198fe7234947db
SHA512

4f4da61082b77d62a956e946f98f54c2ec44d24546945a537af045ca617cfc9076ed37140bd75e9f9d2a29dd99189146a47606efcc2f369bbd2168b0eed2696c
SSDEEP

12288:eN6J41lHCL9mS6aeubGpeeK8Sak7Ccg5l2m0fRHG6B5:eNv1dqfgeeK8SakGcUviRT5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/d8b18e36b62de2d2769bb8635934a1cab373d1e752171024709431ac6fdb8ef6.exe

Files

1eab47264a2f9ded2e6e3ca2a265176d.bin
.zip

Password: infected
d8b18e36b62de2d2769bb8635934a1cab373d1e752171024709431ac6fdb8ef6.exe
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\SonoV\Bin.net\ps_game.pdb

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 58.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.teos
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 4KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE