c6b2e5855e812f01c47f3f3275269d40[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6b2e5855e812f01c47f3f3275269d40.bin
Size

1.4MB
MD5

235ab70b7db9cf5e5c76823ec3deeaa8
SHA1

89679ba0657ae822805482652772116598be0a4b
SHA256

54e760b1c69dd3a057d8d8b3d8177c7b869ba1de0ceef443d2afc2d3ca5ed9dc
SHA512

5ac8ac736e6d1376d804bb0b304df54b04fe071d25f0c1fdbe90eb89b58de7d336966b58a03d66bd19c8190155d486791a4bede288d08d2752ce2da9ea87f5ba
SSDEEP

24576:ZG4yTQ9/QOjssfRP5cv7hrDpRjGSz7uwEljEfr/fX8fvalW6FOhEax:ZG9TQ5jss5POv79jhz7XXP8fv6OhBx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/e69807c8d0056d2e128bf54e1412bea2abd2c89a4f28f8c4562e9fa0eb79c544.exe

Files

c6b2e5855e812f01c47f3f3275269d40.bin
.zip

Password: infected
e69807c8d0056d2e128bf54e1412bea2abd2c89a4f28f8c4562e9fa0eb79c544.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ