5a1e5f813840f6231733e1043bb320e1[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a1e5f813840f6231733e1043bb320e1.bin
Size

588KB
MD5

87a0fed364b72d43900e8a992f086fbd
SHA1

4389387fea50747b5407043067c5cb90b874228c
SHA256

2842b670177ee95a4b3b7221887bc877e5570f735ea91de44cd45ec715a20486
SHA512

9ace3e41df3b73eab5fcc2ed35c787c6853752a7f430096d35371202637f5adb88070984ed4e3d2a28fa7a63ea5016c3c0854f97acb9cb5f606e68c0a5d21a69
SSDEEP

12288:IV7ljboSxyVzgh8GKgwKneRWYNjGHKL68ZHpvsj6X2Lco:IBFZyVSimeRWY8HKL66J0Ngo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/e4f1164364a86e7ae9293f9df8d976c8037e6701c7fb7103182186c2f5cd4968.exe

Files

5a1e5f813840f6231733e1043bb320e1.bin
.zip

Password: infected
e4f1164364a86e7ae9293f9df8d976c8037e6701c7fb7103182186c2f5cd4968.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 692KB - Virtual size: 691KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ