1399a8cb59c05e00e63f5ba44446557e[.]bin | Triage

Sharing

General

Target

1399a8cb59c05e00e63f5ba44446557e.bin
Size

544KB
MD5

63228ed16bfdf7b31688cb25b37eb89c
SHA1

126c5d32fd38209c5b591493e3a1d1b7b5525a4b
SHA256

408407707c5c00d8a6bab7761a296f7ddefe93e50da7746dab3bb7778631d815
SHA512

7ed5041571f53b32875669a1ad5e4f3a7d4473475a02108dd01186a0a5df37f83d928f21a9151bf61fcfb5684bd8c5a9adbb6e022fc1492d806f998c9a4a5b1e
SSDEEP

12288:GP4lGZt6aB/dXEvRHAHQHJr+LWQOBxFNgLab9m/khnR:k/WadpEQAQOBdXe4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/5a224ab3b182f13b491469c57c336848721fd9b3205c7b7905b1d05e5d99aefa.exe

Files

1399a8cb59c05e00e63f5ba44446557e.bin
.zip

Password: infected
5a224ab3b182f13b491469c57c336848721fd9b3205c7b7905b1d05e5d99aefa.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 605KB - Virtual size: 604KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ