159d5fc953b4f50ba36c98edd6fd6c81[.]bin | Triage

Sharing

General

Target

159d5fc953b4f50ba36c98edd6fd6c81.bin
Size

596KB
MD5

3f593e7b450a796f2512cc69ba2f10ac
SHA1

d0c00228524a025d1f32fef146ee856fbb7bb2ed
SHA256

77b06750d70242fa640de1f435856192c73f09996d4bc944809ea5966ae299ba
SHA512

c0607dc9471eb7fc3104ec772fb6eb441d1ddc7cc06d851b7d95f22459ae9a5b435223b81e4ee9781c23c1d845df81de188696f1ce79f8513f07f8140c23ceb6
SSDEEP

12288:wuVMxUkshG154tbeh1Fq/DcxP9UVmct30mPJi7ulxYsqvA:wwMuk+G154tbehDHxVwbEcEql+nA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/e1d2116fbcb690a0b015961eb71ff0a942601170a3371dab1c65f965861bf6f3.bin

Files

159d5fc953b4f50ba36c98edd6fd6c81.bin
.zip

Password: infected
e1d2116fbcb690a0b015961eb71ff0a942601170a3371dab1c65f965861bf6f3.bin
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 614KB - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ