0fa7a0b88ddcb3f10416e539eacbf271[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fa7a0b88ddcb3f10416e539eacbf271.bin
Size

5.2MB
MD5

8c1cad9edde498c74c1e0dbedfbed696
SHA1

87bded41bb7d7551296e4c8a9ace4de6b7781835
SHA256

616c4b7a01de4e0ecefcdcd80c19e33c39fe3ef59e41143cfaa97dde14b80aa3
SHA512

6a55daea83ae18dde4684add3263f12b6102873b119993115fb3a00496059bd17cdd3fff7b7f44945f648a384006559284f5d70de2ae42f21d3d491a3e9a3896
SSDEEP

98304:GayKM9TunEBzzsQMxVrsNjl8AicflDUxnWRalmaXJTPOKV5caf+46ngUtZTyEQAN:GnKR5xVrEYcflImYJjOm2NngUao

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/70958bc9ab26e3c2f8bacacfcf29970d250a62b57426146241961a0ce3d92397.exe

Files

0fa7a0b88ddcb3f10416e539eacbf271.bin
.zip

Password: infected
70958bc9ab26e3c2f8bacacfcf29970d250a62b57426146241961a0ce3d92397.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.2MB - Virtual size: 5.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ