ab69d6548ccd94133e98d0969a8e50af[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab69d6548ccd94133e98d0969a8e50af.bin
Size

808KB
MD5

bda2b708c66fff2bc3dfe6acafcb01ba
SHA1

97feecf181ff6007eb0eb43ab59372233a8f88d6
SHA256

dd28aadece5caef4540595c8502ab9ed1a7c48062fc744c3b69e5c2e7804b08d
SHA512

e41c59654491a3a623b324a76bd2631df5b2a010b81467fd63587f12d50777557df78d3da3d41e566273119275ba75a279daa4db9b9a4e05303a08d76662e98e
SSDEEP

12288:IsdwE5AKkk/IxF2ZlMZT2GO3GGx5gRBI+AuvkOlpsPFx/EFEdYCDNHK1Imou6MIj:Isdr5jpg23Gz++AykOlr7CpVs6FXPT/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/e8494ad45492e71aa36941a772d0697db87bda82a91f16e69916ad9a4642042d.exe

Files

ab69d6548ccd94133e98d0969a8e50af.bin
.zip

Password: infected
e8494ad45492e71aa36941a772d0697db87bda82a91f16e69916ad9a4642042d.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 912KB - Virtual size: 911KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ