4d6a1026728059cb4259537c95ba4abf[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d6a1026728059cb4259537c95ba4abf.bin
Size

130KB
MD5

61dc99d4417a5c80de42ee02d53523fb
SHA1

b0528a7da8549c7bef8f4085c7b265352763d41c
SHA256

8c4b52be7057e705c1c3c4301462133f4ed2750d323d4c8ba23f616d72f7552a
SHA512

9d83285c5b4197770217b464af3b864774f19220a00ccf3b5e9c3b8ab598675c4b5501586f7175cb44738a8752394da3d13da0a1a37e8f1fa75902068aebab4a
SSDEEP

3072:gZ7y62nmN+QAsRYNiNDdWHNuxbuzxOAjBb99u59QbisI:BmN2sRYNiNDcHs2xOfXCzI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/78ec5ca63d5f52165735a21415297648012929546852aa3169522738b8e72028.exe

Files

4d6a1026728059cb4259537c95ba4abf.bin
.zip

Password: infected
78ec5ca63d5f52165735a21415297648012929546852aa3169522738b8e72028.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 301KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ