7b79bbfe338448b0de6662150[.]bin | Triage

Sharing

General

Target

7b79bbfe338448b0de6662150.bin
Size

11.2MB
MD5

078e14f5a5563a97927da4d5bd8aed7b
SHA1

c4b3d48d8e44a17f9163d3270e14138d8f977e13
SHA256

641a1a8dd5377977e5d961268e88b5cfcaa679191cbf0ea34a53f8132a342b0f
SHA512

86bb949ef1b81b3fd40854d1715494f58ee4e2eecd3d1024dc118cc4b9ad3ce872b6ef0322d3dfd3e1bf6e8e5afb23184bed15e4fd5aecd585a949e96639c079
SSDEEP

196608:fYnBTvDg0s+Hs6BwLpxCB8LHZHQv5Gk4z9TkNdlteq8LV/SiaEH9mNXmrtFZ3toV:fYnpm+MK8pFHOGt9TgLteqypSialNXm6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/150169f8a2862e4c977fe99b4d6a1af4e2169deae6d76d64434af35633c01e03.exe

Files

7b79bbfe338448b0de6662150.bin
.zip

Password: infected
150169f8a2862e4c977fe99b4d6a1af4e2169deae6d76d64434af35633c01e03.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8.2MB - Virtual size: 8.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ