ad607f046a6f855f06d0e7b2cab189c1[.]bin | Triage

Sharing

General

Target

ad607f046a6f855f06d0e7b2cab189c1.bin
Size

254KB
MD5

782c8c8c6d54ee7f3d6d9773b3c1947f
SHA1

6b724ecec1175875e250d1c9d9c1e898ef62bdfe
SHA256

6ad193d16ad5cd7426369e29a47dc02df6e40762c84d58281d24fe6b77799714
SHA512

66de67c497df48821ab28285c23874160ec37475ab27ae23cc7422526f1ce67ee5cb0f706ae3e8c9793960a83678b6dc48ae85363ce12470ed9076c7816bb9ea
SSDEEP

6144:eVb1PMim55/mWOarwXraXw7yZzJKKhDh2vI3LwgZ:y5vmH/Y8wX+3VJKK10ARZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/552719d9dda2789ec880ab52ba8c7e695b631d6fab6d56474b4b6a4f8fe4c21e.exe

Files

ad607f046a6f855f06d0e7b2cab189c1.bin
.zip

Password: infected
552719d9dda2789ec880ab52ba8c7e695b631d6fab6d56474b4b6a4f8fe4c21e.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 383KB - Virtual size: 382KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ