aa4bdc6e4bc363b5e942abb6e91beb52[.]bin | Triage

Sharing

General

Target

aa4bdc6e4bc363b5e942abb6e91beb52.bin
Size

4KB
MD5

716ccb17a06784a99c246e8fbddfd7cc
SHA1

e3138f2ba09d53c0e5d1bf731d9434a74273ea9e
SHA256

ca15fc538848740c1b979033adbd2bd27aa3a59a6abe8cae500a6470a428de7e
SHA512

90cce2b41cc25d66b502beaad40097c0ed4bb01fe63113e76a6755f14bd27f5fde5614f4550c93f216d3b4995413ddc37984ca987f636cecd462f89ec97b1e46
SSDEEP

96:WQ1tDJaSE8pNdJ9A0OARUptMSoOrG+iBUSmAhBn58Hk1XoRYH:R/DJaMpjI+UHMSoOqDU4hBneHkv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/e54a10d5f2679cf96e33d264734763b1864c859cd2fe666e9d803a081d521bcd.exe

Files

aa4bdc6e4bc363b5e942abb6e91beb52.bin
.zip

Password: infected
e54a10d5f2679cf96e33d264734763b1864c859cd2fe666e9d803a081d521bcd.exe
.exe windows:4 windows x64

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ