b1aa4f227fc62318d5a720e2bddbf206[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1aa4f227fc62318d5a720e2bddbf206.bin
Size

442KB
MD5

f3c06ab0a149b0fc431988bbb4a139d7
SHA1

8e14bed84eac4f23bfdc74b2bc8a996ec306d2c3
SHA256

398dcb99f3400e83a6b64fab444aa6e6ef3e701faff59ab23386e36187ab91fa
SHA512

390452da3ef91ce0052f4590d78eb9a3e1c02198389632dcba2289063d04a260434ebc1cbc6cec7e7276aa6b06acc34a1eb701672cad301c4e56c5c48dc90ff9
SSDEEP

12288:9aV4nhA9Np/IKg6hpRPV6+sXsBRXxJnEO0S33zGSo9:FnS9L/I5AnV6jsHX3EZSnFo9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2200617356a044631447d18a7157e8e73999076a93e065c7db2d8aafdef9fcd4.exe

Files

b1aa4f227fc62318d5a720e2bddbf206.bin
.zip

Password: infected
2200617356a044631447d18a7157e8e73999076a93e065c7db2d8aafdef9fcd4.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 568KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ