f64e40837c745db38477fe9136f5af8c[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f64e40837c745db38477fe9136f5af8c.bin
Size

227KB
MD5

4f914dabd0df7d19ad3bf188fa37b44b
SHA1

57a940f19f770cb285b7926277c6098198e9eaec
SHA256

2a18519501da2009980cc1db216c93ab3f7d2885c3ec7bbdca395e2845401608
SHA512

8a66208060b1487ffa0a18d570781124dbff9be6ff93d84aa8f93322e347c651d3673389cee20365f5296b987eb7296b6a5baae22a1a180df63a06d4964a38b2
SSDEEP

6144:iQLhumvB90VEH4rY7G3QH4YM4ovv7RPtGZGXoFkHDSsGbQmY7/s:PlumP0CS1324Iw6EKkHDStbQm2k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4fd73245f62b512cac14ea76be9424e1d7bb2f36b7251a8456323e41695b33f4.exe

Files

f64e40837c745db38477fe9136f5af8c.bin
.zip

Password: infected
4fd73245f62b512cac14ea76be9424e1d7bb2f36b7251a8456323e41695b33f4.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 551KB - Virtual size: 551KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ