b1e6a4300ddf51294c521d5cebc6c240[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1e6a4300ddf51294c521d5cebc6c240.bin
Size

618KB
MD5

3e52f276044b2e12d3111f2898216bb4
SHA1

2d4c4d3ed7c02eb5d4a24bbe0db20321e466ea6c
SHA256

31f4b72d2efd25560b5eecbcb26bd508bf18ad30e1f1c155de3f4d7a5c508e05
SHA512

8a50852638f46fc9734cdd5e8a2b5eb2403f78aca5f26b098b9fad2c0a7ec51c463bbfd74398128268b00cc8f07a366f80a686a9198d635bbda2ddd597bdc2d7
SSDEEP

12288:lAIWOusB6406iVCkfAWGInfZmu4NWJiVx2skzeq0hf0d7RA672dl:aOuaB0HCkjZm/N3x2skzexf03/72z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4842082fa4563ef01ed73d0e10c46fb7f6502ad5e0472462766d283067cff9fe.exe

Files

b1e6a4300ddf51294c521d5cebc6c240.bin
.zip

Password: infected
4842082fa4563ef01ed73d0e10c46fb7f6502ad5e0472462766d283067cff9fe.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 693KB - Virtual size: 692KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ