64870ba5b0e92b05dc383959e02782ce[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64870ba5b0e92b05dc383959e02782ce.bin
Size

312KB
MD5

a4dd50bb462d5355e2a234feaf4e1ee2
SHA1

fe869c23927fc4d6697978613e39ae717d3e1451
SHA256

846fb6046eb4a1edc1df81b25b6445cbf65fdf8e2eb214c636010622963cc3b4
SHA512

a6fcff1600ef097bf3f7b44d5ec1163a28b1d68e13f3b183b6287bec348e907f27adbe284b84283c4812d3d125ed7d97fb1f1098044424265c40c6a4db48e604
SSDEEP

6144:ERV5zUrCnOnWDgbUbwlqw1ow6pAQpuxM48QB0SFQwslgWPRQbndjXJfE4Yi4b:ERvsEuKwNuwOj4xMYOSF15qcn0Y4b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a0c810baccbd3943748568d16e5b9cdf6b829364c8e4b21cda09c4f865b228f0.exe

Files

64870ba5b0e92b05dc383959e02782ce.bin
.zip

Password: infected
a0c810baccbd3943748568d16e5b9cdf6b829364c8e4b21cda09c4f865b228f0.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

x SN Q
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 749KB - Virtual size: 748KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ