f82fa51032e669fc7d164b06ae6b36c0[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f82fa51032e669fc7d164b06ae6b36c0.bin
Size

873KB
MD5

5a9121e524d1451b38bc95e7c23589df
SHA1

eeac4b2859ca3dbb0aaf51c4842deedd86162b8f
SHA256

da5fe0b357bd70383263f4251d015e8c2519adcbb6c6572aef9b95f8a18f80a2
SHA512

5d988c1eb1472446a3b6db6bbf2d6c17a293368abeff7fe699d5051f99790540099b1f4cd3a2129bc0b4ed1e1862aca5bda4869d4ba4fd9d9dd36930bde413cc
SSDEEP

24576:bwOm1C8kdpmRmQLC26tZ74qrcfuvDKOlfgka:OBkdpL26tKO5r95a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/92437616e482e2b53e82ac5053e642e75ff16a280afd0bb53a98a909ae0e86e1.exe

Files

f82fa51032e669fc7d164b06ae6b36c0.bin
.zip

Password: infected
92437616e482e2b53e82ac5053e642e75ff16a280afd0bb53a98a909ae0e86e1.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ