8ff68132e45fd815ceda6d4d45c940d2[.]bin | Triage

Sharing

General

Target

8ff68132e45fd815ceda6d4d45c940d2.bin
Size

490KB
MD5

dba38ef1cad006f8afaa75cb6a38c42f
SHA1

21cec0bd7baddb37b7c5d46430d5937c9abffe41
SHA256

60fc0a4ad89d3e6f4c3afa1ee50112343dd2326b95eb9f74ef2e0e4158a2f8ed
SHA512

cbaa4bf1e977a3bd3447bda7f7696f312226aa9c2594a4973b8ee3b2140926be8f4294e47a2d13d2d125ebe73f97d6b00503688768ef96bb7b88300a1577c7d2
SSDEEP

12288:16Qnj0WS4n2Qmnal6tl9xNQvjmFcxkGMiX6Is3NlnDjNEWK:kQn7h2QY7fxNQ/kGRX6DlnDKR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/6c497d0004db81c3992fb2ceb661c33191f56c36f062ca52eca4b9a3926a08b4.exe

Files

8ff68132e45fd815ceda6d4d45c940d2.bin
.zip

Password: infected
6c497d0004db81c3992fb2ceb661c33191f56c36f062ca52eca4b9a3926a08b4.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 508KB - Virtual size: 507KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ