06c4b26e4b35eefdd3ba47c2a6316f0a[.]bin | Triage

Sharing

General

Target

06c4b26e4b35eefdd3ba47c2a6316f0a.bin
Size

3.3MB
MD5

e758754b94b6d999e8cc7527fcd9cdf6
SHA1

65d33ce385cf04f799e2c5a23cd57aafd790580a
SHA256

00818428c3456dbddc5161c4355c27ef68bed7f54c1964d36696fc2d8e316d76
SHA512

20052f9958925071d739d3b7a2e26472cb12a7923ee2fc7a7a33364234874b30126406eb68107fe541bd835fbe6860bc9c189dfcb5990ee5a9cea3b7551e1cda
SSDEEP

49152:EgcIpeLDGGjkFJRBmPJIyExg253DLkfLtBeSQggdrNEVpKyoUEazB8JFwg8G4z:EnVukkFLEIE253DLWRBe7JN8/cazDxL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/663f49a7b12d9ef01a0c3c98892d7c9a204cae1afc7bf134da02510b61195bb5.exe

Files

06c4b26e4b35eefdd3ba47c2a6316f0a.bin
.zip

Password: infected
663f49a7b12d9ef01a0c3c98892d7c9a204cae1afc7bf134da02510b61195bb5.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ