baff53cb7c0dba9be6859bd815559bf1[.]bin | Triage

Sharing

General

Target

baff53cb7c0dba9be6859bd815559bf1.bin
Size

568KB
MD5

096909013d424a04adcdbff3e350fb10
SHA1

dc82e1a4bf8d6d4a42f91e00e314fa5114244576
SHA256

84f8902195a85c2b5acfbe5b1b539404ba3ce838875a14a1be49d06006d86631
SHA512

387d048d4d651f649bf54288a8dcc3592212bf2ef97e10879429659bede12deef39cb0488e70c1ffff99579f8256351c95cb4d9249299ee699339e712b93981e
SSDEEP

12288:SjMerUeTfhRnfHtyk5MHIJNOJQfcFwO1Zb223ZD5kEOOdA6vo:Sj1UeLX/trOHIJNPcFwO7pD5k8o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2eb12d18200b79353510751ef2f4fa4ef70ec48beeaab08bc16d75bacdb90463.exe

Files

baff53cb7c0dba9be6859bd815559bf1.bin
.zip

Password: infected
2eb12d18200b79353510751ef2f4fa4ef70ec48beeaab08bc16d75bacdb90463.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 728KB - Virtual size: 728KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ