f7886952e1499d4180a3d531241ba5cb[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7886952e1499d4180a3d531241ba5cb.bin
Size

476KB
MD5

4e33aaba3aa1a6fae20e62e31c981e95
SHA1

f97e9991357be1217742c5a6fc8b7e36c0392a0e
SHA256

44ed1e83a6230748038f056676fc5b696dae492a103464d5344096b8a66c7a1b
SHA512

99fc6821942d2c8f2c0e45c53121add65c91972686b36d0a93515930300f9f25db49c06a84683e798591b2360a2b1716bc7d5c3ba1a1b74f0a319cfb98a27be6
SSDEEP

12288:xg2EQGjPLgsoNbaeIspP/UsbyzHqUixRJcC:xg2agsQaeI8YHZevt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1337f620c5fcf87f438839baed8cbf3c98e8200d1822c60ed4586dd5aa5ad206.exe

Files

f7886952e1499d4180a3d531241ba5cb.bin
.zip

Password: infected
1337f620c5fcf87f438839baed8cbf3c98e8200d1822c60ed4586dd5aa5ad206.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 819KB - Virtual size: 818KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ