ef60156618f28126ff1bec1f5e03e8f0[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef60156618f28126ff1bec1f5e03e8f0.bin
Size

690KB
MD5

2a5f4fcaf8755bb82fd37ba95a1a14a4
SHA1

a79f36fec935c76bb2f6489de2730b09406e0c90
SHA256

69b8a567fab132e9cbb40a066e7b6fa10a6497b46740dc9c63ed998e6ade0a2a
SHA512

8e02e8c8716576c4182eef6dc27325e3babcb09c05c9171d0053890ebb7794cdf5551751e640bc8f4a02ca75f0038a694731652aa0e5b2f54ab681321e0dccec
SSDEEP

12288:KueUqena+9D7clNFoU0fZv05jwQZJ/FtmgcDWMPx2lNmZ5JWWBRTr5ZwJ:KueUqenlVANFoU0KjwQZlcDJYmxWWhrA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/bfde4e4d95b159f2567c39229e702fc4bba9c53dbd579855ce487794a6759aa0.exe

Files

ef60156618f28126ff1bec1f5e03e8f0.bin
.zip

Password: infected
bfde4e4d95b159f2567c39229e702fc4bba9c53dbd579855ce487794a6759aa0.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 725KB - Virtual size: 724KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ