94d7d5f70d6d2ffdafb1bc5971357591[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94d7d5f70d6d2ffdafb1bc5971357591.bin
Size

515KB
MD5

a926492627cd52ae9aff0a046688df9c
SHA1

df1dea2139ae370c3e40f3352a2aa14f693747bd
SHA256

836b24f134e9ddbe1e461b8f97bf8ea61d2369555d79cba67ea79a44808134b8
SHA512

e1175a67238f6aac64417e15c09535f9882bb4a0c0b0b88fc7e97386f89a87e8f82e7c1742872c9133340f4056ac3f4a08d61eb9d46c86d205fa3646974c5e80
SSDEEP

12288:fFlaIs5b/IZeg9Lj6eWhFo99eMAWsnTX0pdf:tlO5bqegt5oFofeMF2Af

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a0a349494a2ddb51929195de419866d0b0f1ba3569a6e0722f7be92c253132e5.exe

Files

94d7d5f70d6d2ffdafb1bc5971357591.bin
.zip

Password: infected
a0a349494a2ddb51929195de419866d0b0f1ba3569a6e0722f7be92c253132e5.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 558KB - Virtual size: 558KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ