54e932ebddd844c2a0e45b39b67affb3[.]bin | Triage

Sharing

General

Target

54e932ebddd844c2a0e45b39b67affb3.bin
Size

256KB
MD5

54e932ebddd844c2a0e45b39b67affb3
SHA1

ddeb71791459103a78aae452572a8e336de9605c
SHA256

20f477602ba307525414025ad98b5e9a4e77e5bdddf83ff05bbd0e00bd6e07a5
SHA512

3663a4618c04749ff080d7701a93bffa2d059e15d5dad8b0d6d612bb49b9855cc23d904bf5fc890dd87345828e02a691a3cdeb0f8ec0f94f9f6f7def2914cfed
SSDEEP

6144:IjozGGjX2GWwli47NOaijJJj37sxijJJjO7sd:I0wyiqNOaijJJj3QxijJJjOQd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54e932ebddd844c2a0e45b39b67affb3.bin

Files

54e932ebddd844c2a0e45b39b67affb3.bin
.exe windows:4 windows x86 arch:x86

b1f41127e51c4a09fcb0aec80965d5ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetTempPathA
lstrcatA
CreateFileA
FindResourceA
LoadResource
SizeofResource
WriteFile
CloseHandle
LoadLibraryA
GetProcAddress
EnumResourceNamesA
ExitProcess

user32

LoadIconA
CharLowerA

Sections

.Text
Size: 512B - Virtual size: 386B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Data
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 254KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ