f6f686df785d0abdc66d1f90fa508c4b[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6f686df785d0abdc66d1f90fa508c4b.bin
Size

53KB
MD5

86aa6094d3891af9fd02a1f1b2f4036a
SHA1

50090ce7f7ec8c2f076625acbe73428b96f1746a
SHA256

786725383114176e90e0609a37f96bbad8f09bb733e39e4a1e587b48efe85561
SHA512

84b68954a2a30f76d154079a5a31da0a847f118e3cf5e5c449cc20266c0999275891a6f73e5d2afcceec9c088faf07530ef36ca61e25acf48e35d686b47f5c59
SSDEEP

1536:lUiaY6Ndord6FncdzBiPKTlO7otLOa2fZYLjS/vXPAhz:lUiaYKdordepE2gLOaXjS/3AF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/61b52af14fc66126a4e7f09b3cff7d3c09e5ad35acf23fb9ba43293fac0c995f.exe

Files

f6f686df785d0abdc66d1f90fa508c4b.bin
.zip

Password: infected
61b52af14fc66126a4e7f09b3cff7d3c09e5ad35acf23fb9ba43293fac0c995f.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ