0b896479ef3f0a0462f48320a3ef16c5[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b896479ef3f0a0462f48320a3ef16c5.bin
Size

21KB
MD5

cffb2e1d2f8c7bc8be85098f93372afb
SHA1

75d17f003b514997150049c2d5c39450c8a804c6
SHA256

fedef2d0699fa479713137525df7ab3306a83db75f040942dea4f77e46f805aa
SHA512

902a9b1b04b5afc22c3ad583fe2ad817ab614ee1419c4e00fa2f5b54ccb3dcb09229258b7e19219c8bf783f7795fdd82243e1877ffd126fdec08036979a51b97
SSDEEP

384:AD1knCOyl/QHHyhLXgv6K4ek7MluErUQCznF3od63wr2LiwC80AXgg/Iu3oY3hYo:WkCOyCn4gZ4SHrMM68OiwC80AXgQYY3b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2d8c76c2bbd7c5a00595ff4e870d1b4009006bb7befd48258d9c8859e440cc28.exe

Files

0b896479ef3f0a0462f48320a3ef16c5.bin
.zip

Password: infected
2d8c76c2bbd7c5a00595ff4e870d1b4009006bb7befd48258d9c8859e440cc28.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ