b8cba7ee8e426a979f81c4124c9e5a33[.]bin | Triage

Sharing

General

Target

b8cba7ee8e426a979f81c4124c9e5a33.bin
Size

558KB
MD5

8d30118c2f7753d3cafe8ae0eac77807
SHA1

bf7222fd900dd5b7d6960d5fe3a82cd4b6adcd0d
SHA256

9371c8825c755e33f265fd21bd51481c9c008e772dd78c2dc317c709f16814e3
SHA512

3037dd8a6773a6e1e8be98b05ae2f029c92af8bb5805fd667aa2ba147a048e3b5a1a89945f4af272ddcd690a9882f8c11347171f15df9450d2166f7146501c08
SSDEEP

12288:Y30JmaJu4rgmvfUTNtomJRhNETckvUb0MGxtRszO5wqgd:YguQvURnXRkv00MGxMzuwq8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f82b30f5d6ed04a459511bcda6f7070c0136cd2e303edde3b76fd5b49cb1ceff.exe

Files

b8cba7ee8e426a979f81c4124c9e5a33.bin
.zip

Password: infected
f82b30f5d6ed04a459511bcda6f7070c0136cd2e303edde3b76fd5b49cb1ceff.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 999KB - Virtual size: 999KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ