1fee9199dbf1e92b8cae1d7e9afacd1a[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fee9199dbf1e92b8cae1d7e9afacd1a.bin
Size

323KB
MD5

e3e4cbd4b8158264ed300f6f45704f4f
SHA1

557ee819fcbd8c66a3e80b541e845a76330d7d27
SHA256

a5d478e2691c5e74b2b1567986d501619100663d22c60f1a6757f30ead0b97d0
SHA512

37f7b90557219d76bebc4c8465d1939803284cee570af98e446d8748feea25e2630e24043660d4bdb2ed88e63ae2c76e8b9a88d2d04f4263b4749c1fadb13880
SSDEEP

6144:yKNjsq7WnpcPtF1pct7fn84VdneY1bOdd5NS/6yU4TSm7i0JX4d:B1sJp8Fohn1VVh1bOlFyt5hJXq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/d99d15e65b3dc0001e359d4375be1a28141aef7141dbc85d8f57180c36d63b61.exe

Files

1fee9199dbf1e92b8cae1d7e9afacd1a.bin
.zip

Password: infected
d99d15e65b3dc0001e359d4375be1a28141aef7141dbc85d8f57180c36d63b61.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 327KB - Virtual size: 326KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ