b878a102be7e16fb25e2add37ec27483[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b878a102be7e16fb25e2add37ec27483.bin
Size

16KB
MD5

0c484a3d95bea3fe029e67689f9985eb
SHA1

f75a1248ef8c68a8db859e62a34477d9df0e5ca0
SHA256

f3c49141ae0e8804998e7fd50f21afba871075aedaa42acfff456dd0c9502f03
SHA512

dfea428a3b08c571be2ec0c1fbbe152c8dce50a3c3f95364b63e39fd4a2730c7aa7b0e036fb9762a3485a36d07eabf11f36d68dd1482a24640f3a009d32a51fe
SSDEEP

384:WpW69jp68Vzl2FftWGLw68DRmhAmXBQaBHePl5OYS8+P:Yjp7HUftWGYRmX565eP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/44b2e6749b401fffd705180073c3e649c8458d445915470caf41a7ca5a312020.exe

Files

b878a102be7e16fb25e2add37ec27483.bin
.zip

Password: infected
44b2e6749b401fffd705180073c3e649c8458d445915470caf41a7ca5a312020.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ