fd08abca4e3743827c7f8bb9c69066d9[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd08abca4e3743827c7f8bb9c69066d9.bin
Size

917KB
MD5

e1d1643deabe9f96cd6485b33fcd6f93
SHA1

fabe7ae4f5d4686ee6e0c567ef9ef1b7926d840e
SHA256

7055ac266c9d904c90e21d7b8bd4666f5c769139e8947d57c3022412b63b1f15
SHA512

42cbec53cfa55ee77199e6b60db1fda29364c67dfd905a58845ded9809dd0646cc45074b4d15360810f091cdbcb7c51dd1a4a77eef48ac0d3d37e8f6dab2f7ae
SSDEEP

24576:MF1m1dsIoHUYHP3GdbQ24ZX+YjOhZc8cMAoeHqFUyrwuUlZN:C1mfsjHUIh2KX+YS4owqFUfuu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a698ba15b62fcfdee2edc67ef09b6f9422c2319b4ec4b407e14fe925d187a659.exe

Files

fd08abca4e3743827c7f8bb9c69066d9.bin
.zip

Password: infected
a698ba15b62fcfdee2edc67ef09b6f9422c2319b4ec4b407e14fe925d187a659.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ