526130633cde09373ee1e2f831b595d2[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

526130633cde09373ee1e2f831b595d2.bin
Size

161KB
MD5

eb1f5ed95a0f6654cf5a7ed3f0440dbb
SHA1

b1c84a4a25b7152ee832064df44db9231b87f9e5
SHA256

95fff60c708f7cb8bf279aa40fb80d663f47230917744bc4003ffea29942b1a6
SHA512

42d5fe681fca73a624f63068997f3577981add1c929acf2ace61071e5007c0cb6b21c8dd83f4b6126bb532e82901fc45691e71881e0fc6f3062624652ec37b3b
SSDEEP

3072:9ueN17+fA7CLcv5A/mi5TxCaJVACJQS6qQutyn9KgUNL:91v+fA7gcRA/n1oG9mS6BzY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a53afca42d234ac81a441c4fb1c5278614fb07202f7f8018eaa5457a777fc5c7.exe

Files

526130633cde09373ee1e2f831b595d2.bin
.zip

Password: infected
a53afca42d234ac81a441c4fb1c5278614fb07202f7f8018eaa5457a777fc5c7.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ