852599530cd1c27a2f4b469748164813[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

852599530cd1c27a2f4b469748164813.bin
Size

38KB
MD5

db1b0a9d21f8044f939e38b570266e82
SHA1

2d12efb589c4f63cf878678f3cade52bd7614fe7
SHA256

eb4c9895a97a74cff4f4993319ba7ca983cb6d686d1e55bcf86723fc61d5e314
SHA512

5a42264f471dfce852d4abe08b80ad8e11923085dd8e9a542fee7559fca805a76d84a79132cb296465f0f3634595356b3cbf798c616ea3300ba94b7484437c4d
SSDEEP

768:GSwI5nDW0CD0P0nT2b5pVrZIfdAnILiA9Wfzr9BtOKnNl6UsL50:hpDBLb5X2fnLpQn1OgNgUn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/bfa6b4961784928929bcd97f3ffc3ffe24b54af4e50b6e49bb075eebf4d2147d.exe

Files

852599530cd1c27a2f4b469748164813.bin
.zip

Password: infected
bfa6b4961784928929bcd97f3ffc3ffe24b54af4e50b6e49bb075eebf4d2147d.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ