2b68216ee5968e369ce45b1ec0b3b3ce[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b68216ee5968e369ce45b1ec0b3b3ce.bin
Size

223KB
MD5

747581de445d4abf0b8e1fe53189a7c8
SHA1

1f7d61a77e3b026d88a59dbffbb272ebf06b5525
SHA256

90b0201bc565afcb3e68f277755c8dafa318c9abc764c0f007271ab49e64cf23
SHA512

47b90c3959c1865bc91d50870aff5f5f671fb9d0fb717f5c02dda00fc99459d4dd32ae6ab2d93adcf8f043a7c10d37d8d5e41b4384de32d761cba0097235bf46
SSDEEP

6144:oRMRuBNu+kyhSpTLRehhTLJk0EAhXhihE:oRMRgNu+kewXkAAhxihE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/5c5a614e7fd08e67dcb2d584f6877c682e9e17d291c7e4ccdb07e7afd6b5f277.exe

Files

2b68216ee5968e369ce45b1ec0b3b3ce.bin
.zip

Password: infected
5c5a614e7fd08e67dcb2d584f6877c682e9e17d291c7e4ccdb07e7afd6b5f277.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ