50e66a58569fc40a95cbb4c10236a7a6[.]bin | Triage

Sharing

General

Target

50e66a58569fc40a95cbb4c10236a7a6.bin
Size

2.8MB
MD5

625aacf0c3880d6b156054d039b2a8a3
SHA1

19c6d7028c931871b0a89d680d8165fa10031048
SHA256

4dedf307d015bdfa2a2ca65175abed107a041e745c70106054565607b2b29ec3
SHA512

191084b3767e531542e3f67fc8cba050791386d825c928c478ffd60e03c029ddead67f90144c73086b6734d5b441581aa32b5c1c8b5b275faefa2974fa24621f
SSDEEP

49152:HuMRN9anxXDslYtCnvwVQ8fvKSXsjDLZPrUed9yQFjwY1O9OWj:HucN9qxXQlYInv+K5fZPrN5d1OZj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3e58c799b9f3bf48acc3464e3ab64a89f9072ce83dc2726e5e179a07fce0e532.bin

Files

50e66a58569fc40a95cbb4c10236a7a6.bin
.zip

Password: infected
3e58c799b9f3bf48acc3464e3ab64a89f9072ce83dc2726e5e179a07fce0e532.bin
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.3MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ