f9fbfee491440e919bf3ee8df7f415aa[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9fbfee491440e919bf3ee8df7f415aa.bin
Size

434KB
MD5

f58b1878b5bf5d936a5dc42c82406667
SHA1

f3410b41ab746f62ba1724b2f190862feab2ede9
SHA256

79cf8a2f384881ad56f4ea672af1a9490c630cc3e6fe1f2ce412e4ab202e6683
SHA512

0031e42873c1d0f9e71f8cf9cd1b63e54581c151fec9ffb4785c027b462de1acdef8355fa2527ed6351441d3370995cdecff7e9136969708b28e6e55fae1d3e2
SSDEEP

12288:k8luEqM9cbTibwTl7ry5KgrFIV7lc79QvGUvux:vqM9ckIcKgrFwy7WvGq8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f99da1aad2e70c4ac47fa15cbf2a3eeafe86a79886892fe6f970ce8d54f45286.exe

Files

f9fbfee491440e919bf3ee8df7f415aa.bin
.zip

Password: infected
f99da1aad2e70c4ac47fa15cbf2a3eeafe86a79886892fe6f970ce8d54f45286.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 518KB - Virtual size: 518KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ