f686e6edd1cfdaf9e636d2e38f481a4c[.]bin | Triage

Sharing

General

Target

f686e6edd1cfdaf9e636d2e38f481a4c.bin
Size

1.0MB
MD5

2d23a26c2e070592396e10a0372eebcb
SHA1

1f4bae236f8b81548504d72d1d14408e1e153fd2
SHA256

0c23b63f046b04fb84f935b21f28ed14a8ff0e14909aa24756ce10dc391e3261
SHA512

c1a8a3df6935f37396bb870406af51adbe78e30ab943797579e94124e67efa23081536aeda770196e94e15679de0f2513407541b8710f046c45c7bba8e5a165e
SSDEEP

24576:yDKZq3E24vi9IikF+bHnDGYq4tnswnwXuC83vUFjz6oth1uwPB:QN+vMIAvBqdwA8fUFjz6aR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/f9d4a03b124e4e3f81270b666d996db400b89bc1b7ce64914e8295685794dea9.exe

Files

f686e6edd1cfdaf9e636d2e38f481a4c.bin
.zip

Password: infected
f9d4a03b124e4e3f81270b666d996db400b89bc1b7ce64914e8295685794dea9.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ