infected[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

infected.bin
Size

4.5MB
MD5

9663aba28d040319d7103732a0bdd3e9
SHA1

8070035d4bcd418247567b692b6bc66b52e609f5
SHA256

8a57f52d77036553db705e1aceba18b974e68f52ed489c92278823dcc6275824
SHA512

5dfa8efb6d3983b49e312ab2c00e6a10955fe3557e12cddd64b3be76b115bffe1d451c438ea78fd56565e9b7942ca2f85a1bb82e2a397a2671938cb924b33c69
SSDEEP

98304:hnO1cWXoWopyARGi3RoZ5oxNUCQl7JL36045kRCq:al4WfF8Jq7p4sCq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
infected.bin

Files

infected.bin
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 258KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ