54ebebfdc3bd5208e90c5c72c3344c47[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54ebebfdc3bd5208e90c5c72c3344c47.bin
Size

123KB
MD5

54ebebfdc3bd5208e90c5c72c3344c47
SHA1

24be5e89507fcbd677668cefe81e830c902764bb
SHA256

9677638cba1adc80decb128008b4f1064e216d56d454176e895fd6846090b26d
SHA512

ee5a1e1aa4bcfb24a53e2fcf9f16a519036ce4574e8d5e270943290ce8cba1a815e85b9d5f863955fd273370c64e153929a53ea6ae308fc223549558a345193c
SSDEEP

3072:VLkWGDJBtcFFBDobkI4Nk5pLMMv/i0vzxJppq6aCi:ODEDvJNk5pL9vRvlJpz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54ebebfdc3bd5208e90c5c72c3344c47.bin

Files

54ebebfdc3bd5208e90c5c72c3344c47.bin
.exe windows:4 windows x86 arch:x86

e1298bbdc7e82ba478e07cfdb11a65c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FreeLibrary
LoadLibraryA
VirtualAllocEx
FindResourceA

user32

OpenIcon
GetMenu
ScreenToClient
IsWindow
GetCapture
LoadCursorA
SendMessageA
GetCursor
ScrollWindow

gdi32

SaveDC
CreateBrushIndirect
GetRgnBox
GetBkColor
SelectPalette
GetDCOrgEx

shell32

Shell_NotifyIconA
SHFileOperationA
DragQueryFileA
SHGetFileInfoA
SHGetDiskFreeSpaceA

Exports

Exports

_6_sosYQhCleB
_7GgxAicyHR63_
rmDwby
sjzmVhH8D9
BRvyxMzlvsLLV@8
_VyaqsjSKO2SDxa@24
_LSyjc9cWsDhw7
_8xl_UfWdMi@20
nCRo2HwQ
GgcfA5Yv3@4
_bYU7Z7R
_kMmf3Cjdo
_ilrQ4LM
LFTe5@24
RPhTvct202
_FxqdDI4iglG@24
IV_CVCZLCmoPst@12
_4ljnWiqbZbzPUA@20
_mY0fi0HjY_S5MA@12

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ