fc8b5fbdfdb754082b4f99f673ef047e[.]bin | Triage

Sharing

General

Target

fc8b5fbdfdb754082b4f99f673ef047e.bin
Size

23KB
MD5

7a126951f8e0731b4387e8e3f581f979
SHA1

68eb668c368660cc398a7506d0601bb7966b8bf7
SHA256

df56f3c06d61d3b1281127eb452107f4cbe58c2df76c166ecc530f011aa89464
SHA512

abd66d4ea7b14e9155e814978d0ebb716eee658cbbc56d3df60ce52cf67a9b211d3c1e42210b5b0128afb5035cd5dff1d2dbcee672e44833163c81e98507f371
SSDEEP

384:a8GGoghJtPlp/WTImOJSvVwlKCkMU3za3eEw/Mit4LzCJIuR5GTim9c:WwlpOTxVYKtXaLw/MitQCDzGTFq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/712c208264fc1565ff2125863c1c04a10828d9a42aa8a522f254576bcedcd2e6.exe

Files

fc8b5fbdfdb754082b4f99f673ef047e.bin
.zip

Password: infected
712c208264fc1565ff2125863c1c04a10828d9a42aa8a522f254576bcedcd2e6.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ