89fbe5476cbd2b4fa4a190942bb05698[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89fbe5476cbd2b4fa4a190942bb05698.bin
Size

6KB
MD5

86240207cf7b22f8a6a2532787e81f64
SHA1

2ec0cec2d88dd9fc6eef1116b2ca71a49fa32b25
SHA256

bc9cb78fcf0bd95ba75b36b8fe5e4077ad2119faddef14722174216a33db4b4d
SHA512

edea20e14ec945f8a41ebcf9c65bb71ee4f326fce392c989972f6161018e9b68c083aa943a3678f59b5c5125f51db17275d42430ca3b4696ab8fdceb11b6d730
SSDEEP

192:3pkaFIbFN4tX7zNnHEHUdRZ04q1HN4cYCa68q+:3qzstX75kHCRCV1KYk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1a7badce5f3f35c5d1a8127e206cf1fc44e38d1713b85fd35b11ae1241db66f6.dll

Files

89fbe5476cbd2b4fa4a190942bb05698.bin
.zip

Password: infected
1a7badce5f3f35c5d1a8127e206cf1fc44e38d1713b85fd35b11ae1241db66f6.dll
.dll windows x86

Password: infected

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ