1d8bf253a1b160546f4852c4203615a0[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1d8bf253a1b160546f4852c4203615a0.bin
Size

50KB
MD5

1d8bf253a1b160546f4852c4203615a0
SHA1

859c228a45f20f72b3246b47172ffb5a028b791c
SHA256

d204c2968ad477ea8937d44c3bbf88eb4d5a3d55da6448e4fa4a9c1e4815b393
SHA512

38ca9425dbae2f11bd52e39b46b4f350617bce6e10fecfd878a708d9443113a4aff5ac3967bd231d14a99b5a89e4aa19695c7c37ab979fe408b965268da90010
SSDEEP

1536:XCkteqYqDuQecFIByENk2OskSQDez5Gv4zRuL45QI:yktekjecF2yo7jvRuL45QI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d8bf253a1b160546f4852c4203615a0.bin

Files

1d8bf253a1b160546f4852c4203615a0.bin
.exe windows:4 windows x86 arch:x86

60970a725fec16e6adf9c0bee97db2f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
VirtualFree
Sleep
GetTickCount
CreateThread
ExitProcess

Sections

.text
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hk
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE