a7b354291ed6973453aafe52e7d50754[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7b354291ed6973453aafe52e7d50754.bin
Size

518KB
MD5

00b71c8c5498105637169106113d46a8
SHA1

c4ccd7333f6c34f4f094a379575084392ca45064
SHA256

0b4e7dcd5d6fc7abbfca04cb630a9460711244db72bd9742b0a9305a80eead0f
SHA512

def4c98c509cc380234e9f4e19c43b31fe9a4d883f35a47dc471385ef8801712ae72035147b5996fff5585727fcf987f50246b28af2c5981bad13d8b132699ef
SSDEEP

12288:XZjNWaZK+sNiQ1iJRfMhiBpCzX9gUPnZScuhA:pjNW5+sNiQ1wRzvYXOUPZScOA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a0944a8143c9b1520e9d4c27ba2a6699eafc3352c7fecee0039ab0f410b047ff.exe

Files

a7b354291ed6973453aafe52e7d50754.bin
.zip

Password: infected
a0944a8143c9b1520e9d4c27ba2a6699eafc3352c7fecee0039ab0f410b047ff.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 585KB - Virtual size: 584KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ