8f5342770ce07561d59bfd66578c4c91[.]bin | Triage

Sharing

General

Target

8f5342770ce07561d59bfd66578c4c91.bin
Size

358KB
MD5

03b289fef3f090c5b456210faf5de038
SHA1

841809ce8fc77d806818448e06fa871e540509f2
SHA256

edf9770c2a01813fe5eeaf1fa4b884f27334de596710bb3236ff1efca34a636f
SHA512

5e5998ac388b5960a94c345c2844668df73094f7d67d4ce740371d5ed9d31782b778c6721e38ede23a91a41423b70eac04cbe9c59561b60768958b8f3cd1ac25
SSDEEP

6144:JdqG8D8z8ZQ1demIsycV8dLXHvcFxdzdnFxA5sL1bqZ46y/h+enDANN13xSJEqhT:fA8z8Z0eXtHvcFrzlFxA5sL1GZ46i+s7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ac0bff1a7525643d98bf2e590431681430639fc22c07d215baf4c14c51dff965.bin

Files

8f5342770ce07561d59bfd66578c4c91.bin
.zip

Password: infected
ac0bff1a7525643d98bf2e590431681430639fc22c07d215baf4c14c51dff965.bin
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 375KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ