0fb2ff8d76662e331c36e00691d5f982[.]bin | Triage

Sharing

General

Target

0fb2ff8d76662e331c36e00691d5f982.bin
Size

586KB
MD5

fbc69350edf7859aabc62a977e9196e1
SHA1

86d35579dc882664b151e5a10e30e5d27df46fce
SHA256

95891e11de8aee3e86658c33914f928c67ad5f5ea73f222c55d026bbbc57ea04
SHA512

b4a833e939e6e89e86dfc5b4c7f63ae3a63d9b8ca8db0c61d9c3c8fcfb39243160a4a18a0c8480ac0079f4b211401e7fda2a5bd5664d7b9bb6069e1f76de3068
SSDEEP

12288:QpKBmUqbBLKnI2J5bqcgPYt0cDKxYC+T45NSQck6Ycdyv8O3tHO3:QPgI0pTq4AYC+T45NS8iUNO3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/40c36e5d6cec1bac32779ed8e2e2dceceae01a70115a23d3b3d32e9c56db86b3.exe

Files

0fb2ff8d76662e331c36e00691d5f982.bin
.zip

Password: infected
40c36e5d6cec1bac32779ed8e2e2dceceae01a70115a23d3b3d32e9c56db86b3.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 690KB - Virtual size: 689KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ