b4306234a3b45c69df6a6a7cecd6070c[.]bin | Triage

Sharing

General

Target

b4306234a3b45c69df6a6a7cecd6070c.bin
Size

633KB
MD5

ab6a89d7c612d9d6c4a66f66cdc568ef
SHA1

369ff0d3840ec991f59f682a4f87d8bda0f93ab7
SHA256

1dedb9acf13119244cccdba624c65c6b12d2533acebafbe2f6f7ae0cb9185e6a
SHA512

25a0ede1bf907a48370d6552352265f8c67cae573f1730ca933163a4ae0c044542d1489577ad264a560bcd373711fc94ca25558f93fdc4b40b645dfd5cd872f1
SSDEEP

12288:X9r6fPIwUJ69x4GkhWIkOqV9RKO9HBp04N+O5MpGULaLi2Zt8Dq0:X9r6R9x4GgkO/O9hp04N5MpaJG1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/13129eaaaee8200a17214e947f0e984d10050e79c2cd5a963d7ada54ce3aa0a8.exe

Files

b4306234a3b45c69df6a6a7cecd6070c.bin
.zip

Password: infected
13129eaaaee8200a17214e947f0e984d10050e79c2cd5a963d7ada54ce3aa0a8.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 652KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ