b6100fa1252d02c13d5e601b77efa9e3[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6100fa1252d02c13d5e601b77efa9e3.bin
Size

1.2MB
MD5

e798fdc81be057bc4eeeb79a3e73c370
SHA1

83e0e4c0ff8b2a42361a7df55f90a0e0a0396a1a
SHA256

4beb466dad3fdec4ffd7535b636f44b5e4f67c183dacd50cab0c99135179f68c
SHA512

87087a6ddb8ae5e318fa5506c06c2297e6386e387861d16d5a715aa578835460c97386d5df01511bbe90cdf7a96a3b5cdc5f6c9b45cf79e515293773fa0e6bf0
SSDEEP

24576:Sb+5lDqEZ1f1SOy2vh2OUFcJWeDkSDxEZHO/c4DoTOF:Sb+fqEbfgO1vp6creBadF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a5fb447c2992f48abd863452bcd6934032cf29bef1f0907bd9344a31a41e0edb.exe

Files

b6100fa1252d02c13d5e601b77efa9e3.bin
.zip

Password: infected
a5fb447c2992f48abd863452bcd6934032cf29bef1f0907bd9344a31a41e0edb.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ