6aa31145c54f003cd27fe50484d2771d[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6aa31145c54f003cd27fe50484d2771d.bin
Size

733KB
MD5

37962c5b709954ef7ead7ba3260d6fde
SHA1

ca1c2276e2abd35271a95133b7827aa535b72a24
SHA256

6eb826871541e13fb0f53277fbc0f687c580e56d4c197acf0c718d990de1328c
SHA512

ae0f114cfc707b94ee741fa9b39b3eb8549d8a3c7f5c8c72717c5c5cf00b6f5926e72f9cb8b90d0a32bafc90ee9e46622bc6146c3db27592db1ed8f59c57c0e4
SSDEEP

12288:EfB4Mo/wYffa0U5u9dntXwXkEGnciULFdAB9dy7iotWbSuxDJq4nZQgo/6x:EfW/wEflmsdtXwbpdABjoQbSuxd7nZQy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/90fb63402e42d02695cf388e248f6001e7ac20242837387df1fa8757c827cad7.exe

Files

6aa31145c54f003cd27fe50484d2771d.bin
.zip

Password: infected
90fb63402e42d02695cf388e248f6001e7ac20242837387df1fa8757c827cad7.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 839KB - Virtual size: 838KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ