06316899[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06316899.bin
Size

474KB
MD5

8f630c5c155287709977566be7ea39c5
SHA1

d1d54a56ba7fd1fbbc0da6cafde5d3b3216d9e20
SHA256

64769b024e7c984b3f200ffe7f92f96b88eaf56ae6c53e2a679f1de851507420
SHA512

274a4f0b6b0ed924086cfcd74291bec27c38c39654af05051b5c7ad5ccc6c3b245b9e3ed92af6a71e6fcdfd958d65ad3e2465583d49082224d7bf7e898722b54
SSDEEP

12288:J6iNj2mjX+SdNn3XjgNah98K7biImaeHZjst:R2mTr3zdf8iuIwk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3e1f623f0b2c1b85bcbca396bbeb79e06db39138a004c14201827ed1a8ca377a.exe

Files

06316899.bin
.zip

Password: infected
3e1f623f0b2c1b85bcbca396bbeb79e06db39138a004c14201827ed1a8ca377a.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 881KB - Virtual size: 880KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ