15155019639dfcbdd4415c563bdaef06[.]bin | Triage

Sharing

General

Target

15155019639dfcbdd4415c563bdaef06.bin
Size

282KB
MD5

7cad5a2d447fa8bf1b8eb4dbe14afa47
SHA1

4b5532f7e92dc5a6ef96bc63743eeee52e992f0d
SHA256

148a314b5495079f75fb30c0f4e75d086c26afe9c0fa9bbc25a0d984a1615848
SHA512

dc9a806674c141e77d58684a34732a8db6422635a18afa2f737199586dc81a2126f05491096c8922433c2190f1de9e161bfd13b452fb2cb3657dc0928cd2351d
SSDEEP

6144:83faObVgoDEviCCkC32PQJk+YzzdWiqlK0pts31o1wzxtqCGRZ:IfaObDEdPCmYAdCKesFoezxcCGRZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/9734c8dcfd274b038523356935eadc3ff4f7c4b71542def7926f723d0872ca0b.exe

Files

15155019639dfcbdd4415c563bdaef06.bin
.zip

Password: infected
9734c8dcfd274b038523356935eadc3ff4f7c4b71542def7926f723d0872ca0b.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 327KB - Virtual size: 327KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ