2b0e37fde071905fba04f1fa6eebc64a[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b0e37fde071905fba04f1fa6eebc64a.bin
Size

1010KB
MD5

859fee3c768c45eef22cc267cbe26e5f
SHA1

285a54f8f71d6f211890a04de165c8faf12b093e
SHA256

6da539ddb92efd373072af39c3a897b5ac91f8a4e34aed6d6e062cb7f3e8beda
SHA512

0af51f1e30045eedba1d5df8d8ae5eb9140d46599b84adfe26c9d92d594a977fa71ff060bccaee469b5734b50d5215b5b0b7e778439ff18e7c0db4469cb4d8d8
SSDEEP

24576:MacPe3ydZNQ89x8YouvRkkB5Iljto2LLumgtz/k/XiiQ:f3yzNQ89xhlRkUsju2LLBMz/k/SH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/38106a2209026f52e0be443c19aa6f520ced381b00ce20ab78d547475cc24872.exe

Files

2b0e37fde071905fba04f1fa6eebc64a.bin
.zip

Password: infected
38106a2209026f52e0be443c19aa6f520ced381b00ce20ab78d547475cc24872.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ