b5dffcdc5ee5e8b107d617022dec6bef[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5dffcdc5ee5e8b107d617022dec6bef.bin
Size

673KB
MD5

b5dffcdc5ee5e8b107d617022dec6bef
SHA1

f030802c9cb5eb68aae8eb59a0350a94c2937608
SHA256

b600d9e1bd3a167337717b2158546f4983625f86efe64e3991160f12f4f1d49d
SHA512

ac709191eb88599382218f1175ef0597e138aed713db4bce55a1202a66609ea063fe82d000162e8365fc41620ec390bce4ba328c0e961b0886dc1f7b5b386d57
SSDEEP

12288:9+SmPJRF6RPdtmBLQBpKD5tsCPiQvVrq3m/alc9zAlyC1tlNcQWFmoTBGVYRPQGb:91oQLXpKD5tss1drqWylUAMSQnvLhckH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5dffcdc5ee5e8b107d617022dec6bef.bin

Files

b5dffcdc5ee5e8b107d617022dec6bef.bin
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.*lR
Size: - Virtual size: 365KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.x>B
Size: 670KB - Virtual size: 670KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ