c6b88ed4d6660ddc052fd29605e2c041[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6b88ed4d6660ddc052fd29605e2c041.bin
Size

28KB
MD5

485120a4fcbc2bfbd1e738193093abe7
SHA1

38fc7c34edf1cac0a1c554e8abda4d2f20133c36
SHA256

0d428a3b141d14c42b5e63c54eb2b08cc0f7453eb6511d1b6694aecd43117f9e
SHA512

bf32b4567b1914611ef6f06d1510a6f023828b048d68ca6d03782eb785b80dc0f9b9177b29938cd9f7740beaec9827670acd2af77f8ed4eabd5cdbbf601c1733
SSDEEP

768:Ii1AFqPKcqpDy8LGc1sUJKZQlj0YJO3Xpt8muPVzD:+qPcpe8LtsUoZQlj0UOnpZuPVzD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7ba6a82afff9a6b0025f0aaa0ed5719b43fc9e7dc9144ed56a39c9771a643427.exe

Files

c6b88ed4d6660ddc052fd29605e2c041.bin
.zip

Password: infected
7ba6a82afff9a6b0025f0aaa0ed5719b43fc9e7dc9144ed56a39c9771a643427.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ