eb41418f085b134aff696f2151b32690[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb41418f085b134aff696f2151b32690.bin
Size

477KB
MD5

d6702c39c6cc46c09c74a4d5926e70f8
SHA1

011c10757664a670fa395ad1e22e023a5f85aba4
SHA256

6d491a68dd3bed0dbf8d87ba6833279e15478f0c2bb7d8a423bdb8c3a0170959
SHA512

e95a0cbc93ad961d87b913281e8e5a5d0bd70e3a2a54876094420c9128b7191e59bb2ea5288685964bb1251c11520318d8a0b9f7af58de362e15c2739195a8eb
SSDEEP

12288:1i3/llVNMSuoSxEJdWaN9EXJSTg5X08bEB2js+e/E:1krVNGoSWJV/TOTbEsoG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ae714a06890df0dcc9d6bdc4f82c8c92a4e6d341ff64c07de226179e56a32866.exe

Files

eb41418f085b134aff696f2151b32690.bin
.zip

Password: infected
ae714a06890df0dcc9d6bdc4f82c8c92a4e6d341ff64c07de226179e56a32866.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 669KB - Virtual size: 668KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 326KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ