6b676e72f5850ce4aa0f3878ac4cd1c3[.]bin | Triage

Sharing

General

Target

6b676e72f5850ce4aa0f3878ac4cd1c3.bin
Size

312KB
MD5

209dd083eb1825f48a0c623df6f8b425
SHA1

f4116483a4953720c70261e166ab508d85bbda31
SHA256

db6b10d70af9876e38f9241952272b49a35ce1325a5e5eccb03f8d55be0bccce
SHA512

fdaeeeff7aa386e3801197326383e6e3e950a67a08c31594ff96183b8307db4ba0d19e637f0257c6ca40aac935e873e2467deed8230a22826bb6e00423d1c370
SSDEEP

6144:A8bcGHSBjD+G/HtydHDvhYBlUY4nVJcOb2oCwtGXEV4t28rRuSAc4wfRnj:FbcG2jD+GVydroUYIs+taI4t2jo4wj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/7cdaec4816187a281084f9274bed4893b2d850bad9ceb7d0bdd4571fbbaa5cb7.exe

Files

6b676e72f5850ce4aa0f3878ac4cd1c3.bin
.zip

Password: infected
7cdaec4816187a281084f9274bed4893b2d850bad9ceb7d0bdd4571fbbaa5cb7.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 463KB - Virtual size: 462KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ