4693d917d5573d64bfd2a27e46e04504[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4693d917d5573d64bfd2a27e46e04504.bin
Size

2.3MB
MD5

97625ee74bbc430f2e7906d472691c34
SHA1

7888d5ba43a43eac455db5eb58bf18857fd26e57
SHA256

1cc65d97d1af14a513dcfe788877f69a538d7e9da03b75a713099c2e85c22e76
SHA512

9314e2fe75bac6b0dad0f6b2b22a1536ab8c41e96c86afd5a609263175a3d1595e2af0b3b44bef3fb0a37f4875e15b7f47fa8e0567755326c66ae5b1e05d959a
SSDEEP

49152:GvboFVybe8Wktd0mjHjVZytAaddtCByEhH:Gvb2ye8Wk70eoddUkEN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2d24effcdf6f620d368752b0bba8f2b96b01b82d95c36b6d5b34ddbe7740362d.exe

Files

4693d917d5573d64bfd2a27e46e04504.bin
.zip

Password: infected
2d24effcdf6f620d368752b0bba8f2b96b01b82d95c36b6d5b34ddbe7740362d.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ