0aab1e371452f83e1b75bac424d4123c[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0aab1e371452f83e1b75bac424d4123c.bin
Size

568KB
MD5

cb6b5e4c6e45f65c06d0abc86a3f6c6e
SHA1

09df93055910bed81429d2c5510846e2569c6661
SHA256

0866f50f4529fe41dcc5471e40d99d28c373309ee89e11b2110f40f08e92f6f4
SHA512

9fb7aeea9b8d52698c39b136c8bf85a12ddc0dfd4d4e856a71fc0b2c4918007595a78cfd500822e6770d2f2d89c6a3ad7166308acb72fbac0e3db15a1a87b3cc
SSDEEP

12288:BSgxeQtTyfgShhXeo5PoJQSDy1OAOQtaxMufjgFirk+T226t3:BtNWhXeo5PoPA/kxvLZYO226p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/852e0d9a8f474077261d053d587868b211e70eff320a7e7067c3fc1cb3253ea5.exe

Files

0aab1e371452f83e1b75bac424d4123c.bin
.zip

Password: infected
852e0d9a8f474077261d053d587868b211e70eff320a7e7067c3fc1cb3253ea5.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 996KB - Virtual size: 996KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ