1fb6a9f16c9b610a08c49867e5ef9f15[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fb6a9f16c9b610a08c49867e5ef9f15.bin
Size

508KB
MD5

95e7c8935a70d37bd083d0851e1c2198
SHA1

24440f414b135f09a152642c627629595d8ee513
SHA256

0ebd661bfb3e842af3953b1a193fc63a7f6eafc3cb4360a6a4191d9f76410f41
SHA512

3d9341822629db8f5fe5d753f2b9d95878d171b3e213722184fbab3d3cc67d9b6691d2b8c9fc19ab63da861b32d0b0dc888b7351d750482b4300fdff5e0d6a78
SSDEEP

12288:Qqoaq2VrAfldDL4skUQe9I7VXCfb94qJExt3TlqPUkhDz2Is6:Q9yV0flNpPO7BCD94qotjlqPUW2l6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/b20b4e7d4637065e0bf78dfd26c861976c0e8f605ee4986f42c56d7920e83e1c.exe

Files

1fb6a9f16c9b610a08c49867e5ef9f15.bin
.zip

Password: infected
b20b4e7d4637065e0bf78dfd26c861976c0e8f605ee4986f42c56d7920e83e1c.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 828KB - Virtual size: 827KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ