5efba56b5d08d560f3be33e8696f4d0c[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5efba56b5d08d560f3be33e8696f4d0c.bin
Size

538KB
MD5

228b468dfc7bbf231d2bf076f003b38f
SHA1

c06c1d63db045716708ff0c238b5557fde49da93
SHA256

398fc4d3fe529628e05d9e8eba38679f6e3fd6015088485a6372448eb0c3df5b
SHA512

23dc47ad5af7be25fc68301aea3e6fcab80eaa2f9e6459ed90709f61bfe11ce08ff49a972df9f5161b767c66f56ef7d6b8e1c11936b505dfef4423d28d2fac57
SSDEEP

12288:bgMBgPty1qZYl0AvBFpSN15uwOrE02DDrf/daVK/RRqwSZyA:bVgFCyAvBqNqC02vr/qKJ8wSZyA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/0aba674b0db534de4f52e8250710b173b697397cbbf0011a4a6a3e9127e77781.exe

Files

5efba56b5d08d560f3be33e8696f4d0c.bin
.zip

Password: infected
0aba674b0db534de4f52e8250710b173b697397cbbf0011a4a6a3e9127e77781.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 703KB - Virtual size: 702KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ