7efeff7e5f25b22273eab9e0dbb54171[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7efeff7e5f25b22273eab9e0dbb54171.bin
Size

528KB
MD5

bf7049727c0ab3810e1a2f0b26996a93
SHA1

f8b9c774e433cdd684a07af75cad56fe8de6c713
SHA256

eb4b61e6bb39c6d4275a83cd63e33850e9bda7f5eec8fc86582a27d4d34f2051
SHA512

585d1eac54f73620311947d9ea44afc587c291a523dcbeafb54f5291803511a557303bdd4e533b782eb9171efaa258b14b8175c2c9c465e8d61c64633992343c
SSDEEP

12288:WPkkj2MxdxL/7NvNSi5+TeUYwNQxtNAN17rmt9GPkwL8WGqqFDpV+EGyNAqF:W8+jL/pvoJKUYwStNAHyG8wkqs+0Nr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/8371116d95aa209dd33ab56ef48b991b23c0882d04efe59bee73039077565197.exe

Files

7efeff7e5f25b22273eab9e0dbb54171.bin
.zip

Password: infected
8371116d95aa209dd33ab56ef48b991b23c0882d04efe59bee73039077565197.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 602KB - Virtual size: 602KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ