80a9f5a1f01d4716c15bcdc8d025a8b2[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

80a9f5a1f01d4716c15bcdc8d025a8b2.bin
Size

69KB
MD5

e70714a71d2c287c67bb5eaa2138c2c0
SHA1

ee9e8864e5eb05d0b65095cbe87becd0bdfd1e5f
SHA256

d4eddae61cce06e8e33917bc0fc9e2512530954423fb1fa8c1dcd7983abef7fc
SHA512

5f237fe4c76d5c53c87e1dccc5eddaf1d119d32f13537dbe47fe5f3ade26ce1cd7bdeb50a210e2de559ecc2c937bafb316846e2f42241baee33c253aa7cb5132
SSDEEP

1536:/Ky4yxzPAU/+zfjDvfLSiB4oBHJp1CJVxrp94JNADkyP4fNP:/pBAU/+zfnH6oBKxt94nAwyPiR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6fe55b655fc4cd3b51c813e38df4416675ae81ab0cd303e15f591fd74846f9de.exe

Files

80a9f5a1f01d4716c15bcdc8d025a8b2.bin
.zip

Password: infected
6fe55b655fc4cd3b51c813e38df4416675ae81ab0cd303e15f591fd74846f9de.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ