86841a1ccb8603fd4c5f44ab5f978d4d[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86841a1ccb8603fd4c5f44ab5f978d4d.bin
Size

648KB
MD5

7851d5be9329a27f88ce92cb37ee073f
SHA1

d40a0a7f4c4f7d649d4ceabf6bd79d3224e92517
SHA256

2c8281eb3545c356c8f3bcbdf08f0b3680ef784ad29c465302537dea912cd4aa
SHA512

7a60ca09b6f36cbedc4096ecceccf39d625a130070328cd02013755ba3bae9391cc52bef2ef19141b90d238370112750030e130f7584f6f88dd97e273427015b
SSDEEP

12288:Lb4be4h7s4ydlZgAWI5gVzuVc2cfxIzcS9tqPJ7UYhVtnJO2ngtCkOQ3:Lb4lhQbgAr5gZuVcnmpSx7NtIlF3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3096973acd0408ca6115b08d3e7968a5f029e353878991a39c22cc3f9d60683d.exe

Files

86841a1ccb8603fd4c5f44ab5f978d4d.bin
.zip

Password: infected
3096973acd0408ca6115b08d3e7968a5f029e353878991a39c22cc3f9d60683d.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 669KB - Virtual size: 668KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ