7fab964c2d6f73f6fecb13ffb7f7c605[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7fab964c2d6f73f6fecb13ffb7f7c605.bin
Size

520KB
MD5

c83611bdc606e96dbedbadc9eb46a8d0
SHA1

545480cf64f5fc8084403fed612fc52d7055b1d3
SHA256

d6ac4ec2368a83a6c6a4462738461ca3cdf8907d95025f277716edb992767a0b
SHA512

71662bff938cf49bea8aef2bf6290d757e2b1a60cd7eff1ca9fe440d7129211463b1cae3d7d2c5c89a310ab765afbb58dfae00081b1d00c26d0930e5de46a888
SSDEEP

12288:9p0nLompdBDUXu19/XsdI47GSH0iFBeJ557y:9p0LoPXuvsYiFUJ5g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/30ef80649ea063bbdf433cbd9a522d7c6fb7e6615900374b5c22c545430252d2.exe

Files

7fab964c2d6f73f6fecb13ffb7f7c605.bin
.zip

Password: infected
30ef80649ea063bbdf433cbd9a522d7c6fb7e6615900374b5c22c545430252d2.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 636KB - Virtual size: 635KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ