7e13a32a1bc3941d0c01a9a07bfdeae2[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7e13a32a1bc3941d0c01a9a07bfdeae2.bin
Size

63KB
MD5

7e13a32a1bc3941d0c01a9a07bfdeae2
SHA1

f3869f55362834df56ac0dae62afc42a1f7bf288
SHA256

3031a167c9d30b6b11a86d10b03c083625b1c338cc9c7d8bf7243e6831a11c71
SHA512

7ed1765882a61b83a375907ab091d604c45e711ed3d295722375990d70595ccc6d4c0836866dfdd44f60718df8b0353b8078c77549ba8d8ca1eb9fe6b55abd0e
SSDEEP

1536:WWfWBhu0qBANA/PmGQsCoAGvMZXBW5pjtbM0zuP:WWfKhu0qP/PtAGSxWD5bMb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7e13a32a1bc3941d0c01a9a07bfdeae2.bin

Files

7e13a32a1bc3941d0c01a9a07bfdeae2.bin
.exe windows:4 windows x86 arch:x86

7c3ff7dbb659c1aaa1097ec618937afa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceExW
ProcessIdToSessionId
FindFirstFileExA
SetMailslotInfo
GlobalMemoryStatusEx
GetFullPathNameW
ReadConsoleOutputW
_hread
GetConsoleAliasesLengthA
lstrcpy
lstrcpynW
SetDefaultCommConfigA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE