d81b1d5d5aa585ad72e9a339be4443fb[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d81b1d5d5aa585ad72e9a339be4443fb.bin
Size

239KB
MD5

c92844155e0d3125d32dd461f948fa49
SHA1

d54437ea2427cf3d3a97cceb4e17e45a05a957e5
SHA256

323d9fc5f7d1426830ff2455d8a34fee436dfc33c00332fd11a5f0999eaac240
SHA512

157a7a0f7d4b59c7b42b0fca0ce5c3f15ba0faf44476f6901223670cf8f2f35dd6b5583a3944170d2fff3c84050d9272099100afdb97e0b93e32365455737a09
SSDEEP

6144:Ll/RYePZRxMuKi2Lk04ulmhMZvb67YpstA7Srg2Ak:9ZRxqL34uSMAsuuWrr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/53fbbfa7c900fab10b633ca89db69849bc154962eef764e87e76b8e2397da83e.exe

Files

d81b1d5d5aa585ad72e9a339be4443fb.bin
.zip

Password: infected
53fbbfa7c900fab10b633ca89db69849bc154962eef764e87e76b8e2397da83e.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 214KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ