1b8a4a0d9091cb9c2044b91a6463737f[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b8a4a0d9091cb9c2044b91a6463737f.bin
Size

18KB
MD5

8f7e24aa9986f9356851e4e4b20567e0
SHA1

e0382210b302a498794d0dcb20efb63d34807e80
SHA256

df6675f7029a43d89c1e8039c4c39193e11ad68f53685bdc6d993e6016a494ec
SHA512

6b77df0be6e961b8d4abf42aa96ca087e5f153b3d5be1d9df52a809c3a6c47ec51f44b7ef4bda172caec8c0af34d98b2c931b741bee6e295671c885de9565397
SSDEEP

384:YENd4CWqD6xFGU3Fv9ZSJzoeEp5NhaUp/1yVde2LSRchBhE2b0bfFdyqWEWr:YHmDSFGyv9ZW8dpnhrtwVgv2c1WEG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/0b7db565af8cf9f8724af5af103ad52e11ecdc0bf9816689d64a65f45ecd78de.exe

Files

1b8a4a0d9091cb9c2044b91a6463737f.bin
.zip

Password: infected
0b7db565af8cf9f8724af5af103ad52e11ecdc0bf9816689d64a65f45ecd78de.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ