4be7638fdc46975eeaac9bb5f3939e66[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4be7638fdc46975eeaac9bb5f3939e66.bin
Size

883KB
MD5

6210f638dfaf86d365c21cdccc39e50b
SHA1

5812b16524c473c3602bb9c44b073f02b04f7ffc
SHA256

3b96b882be0cb2c59b128d03155f9afe4bc7cbe899976468ebe443a1ec616ad6
SHA512

5491ad1e4dbd53c7941852764201292b7048f0123559411c737c8ea338b32e450869a551303fac99407a5a265d8ecc1886006f8404b2897b6cdbfc306d1c4ea4
SSDEEP

24576:7Nrlgfd3ws1g7wwYiipj1r7wYBTVnw568ft2d:7NrlEdAs1g7nUJr3TVnU68fsd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c261674efa44bd9deebcf6b478ffc330fc97f73b8ca586cc8c79ff6de693bd1c.exe

Files

4be7638fdc46975eeaac9bb5f3939e66.bin
.zip

Password: infected
c261674efa44bd9deebcf6b478ffc330fc97f73b8ca586cc8c79ff6de693bd1c.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ