54e86664119005b49eada1f36688c9af[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54e86664119005b49eada1f36688c9af.bin
Size

414KB
MD5

54e86664119005b49eada1f36688c9af
SHA1

9ac2398bae9dae516ba9f120ce70f20bf6766fab
SHA256

f7fc224aa5fe06d3d4839632f68c660945f2493c382e8365626988d9253f3e58
SHA512

680bfb77156596463c15ddca95eb7514ea987b8649c9591a8b2bd49800576a351c438dd4cd5b71e035103260c040187e40d7bb9ae28c686529d7eaa0f481f4c2
SSDEEP

12288:E7e+mKm0DWnJ8I3MR3PWjf0lNLZXJwuiTry5k:DKnDWR3MR3OT0zZJwhTryC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54e86664119005b49eada1f36688c9af.bin

Files

54e86664119005b49eada1f36688c9af.bin
.exe windows:4 windows x86 arch:x86

3fd32c5cc88b57d56c9058eb6cff9edc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualProtect
GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

oleaut32

SysFreeString

mpr

WNetGetUserA

version

VerQueryValueA

gdi32

SaveDC

comctl32

ImageList_Add

shell32

ShellExecuteA

wininet

InternetOpenA

winmm

waveInOpen

wsock32

send

netapi32

Netbios

msvfw32

DrawDibDraw

avicap32

capCreateCaptureWindowA

urlmon

URLDownloadToFileA

ws2_32

WSACleanup

Sections

.text
Size: 406KB - Virtual size: 740KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xhui
Size: 45B - Virtual size: 45B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE