6ce6035109566b8574a6ebaa3c6e1088[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ce6035109566b8574a6ebaa3c6e1088.bin
Size

83KB
MD5

6ce6035109566b8574a6ebaa3c6e1088
SHA1

057d1ecb163c7becb16b421824bc556063569a14
SHA256

61600b4a494194f99b1fedeee4af8b0aa317143c62cb4aa3251fca92d248f32e
SHA512

2167f7b551241cfca266a2f389d341a4536c169ab89bbd4df25e95444995350f91c75d6617c20fbe596de3c39042450c8c91a26dc3cd0d1a9bc111b80dd49c36
SSDEEP

1536:JZKpfz6C24HKosYhufJ47b/EtyiqmiNs5ZcBuwklmsjEErxTWDTMqhGKYIZTET8Y:JuDZKfzJ2LEtE7NuREsjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ce6035109566b8574a6ebaa3c6e1088.bin

Files

6ce6035109566b8574a6ebaa3c6e1088.bin
.exe windows:4 windows x86 arch:x86

b19deb7c0fa77fd806ac7bd0f4d54624

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumDateFormatsW
HeapFree
TransactNamedPipe
GetVDMCurrentDirectories
GetProcessHeaps
EnumerateLocalComputerNamesW
FindAtomA
GetProcessPriorityBoost
LoadLibraryExW
FindNextVolumeMountPointW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE