5a1f238789c12be8021a8550eed02012[.]bin | Triage

Sharing

General

Target

5a1f238789c12be8021a8550eed02012.bin
Size

2KB
MD5

fda288a20df93f7c93536fdded818aa9
SHA1

30d00f4cda625a97e3afbb600f27c196be9a141b
SHA256

849d09f343c187dcf075c67039ed3283479137367370b3e82ce6a905076fc046
SHA512

62e4b28707e4eafd614bcf2992c35c187e0e2503d9afab45c35e3d7023d2dd83247c5f644d81b0f7c666de3e57ad09c9e00cdb8752dccc04d7ee45acdcc0ea7a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/067908d088c05b576bfb91916cf06ab600cff82e02dacc62d025d34a4919afec.exe

Files

5a1f238789c12be8021a8550eed02012.bin
.zip

Password: infected
067908d088c05b576bfb91916cf06ab600cff82e02dacc62d025d34a4919afec.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ