b354fd2e972a44e95ee6b3a44550ddad[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b354fd2e972a44e95ee6b3a44550ddad.bin
Size

2.3MB
MD5

90a6879ab38d55807bcf4d92b77482a7
SHA1

88b2b322b928b614f8ee1380097089eab78aebdb
SHA256

a920915bb7ad5db30756cecd76f6721ddda9803ff0755b994b6eed9359f2f8bb
SHA512

21cb4f49814ad0a6fcdc1e92344c2d3e5286fadc627f6e84a17e8957a9343d647a339d723f92a8f030b0ad40f32b7333ab193261f8244eaedbd7d4ef228311fb
SSDEEP

49152:ULKLuydg+ZTMXzXJ2OyW3sLUIueM2yjCTmX/o8jz16i/5+r7wrBKnTb:ULKLuydg+ZTUz54gsee22TmX/fj5dpBG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c166c62762f86a0f7512d3dcb799fe38189675470d3090522a1fcd553d9f9a60.exe

Files

b354fd2e972a44e95ee6b3a44550ddad.bin
.zip

Password: infected
c166c62762f86a0f7512d3dcb799fe38189675470d3090522a1fcd553d9f9a60.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ