ef1689effa59f856080516d8e9b5f76d[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef1689effa59f856080516d8e9b5f76d.bin
Size

75KB
MD5

45be155812e1890ac107a7e49b7117b8
SHA1

cd30dabce920555b4b31ffd3c50d72a4a8af7804
SHA256

26c1c6083307eaa767f437b5ec17832800ecc87fc936526149967b56d68f4f30
SHA512

f7423c6427e42504d1046e0c6c6d5ecbeed30b231b49d13c737239f56e46b50506354d4fd19fd2f82cb26fc84bea636bd099e26f6e17e8bfa0e14ff95adb863d
SSDEEP

1536:c4gvIq1vbJ9NzEDq0PzIYabwcNnSeftlL0XLvfyF:N8BBrNEb7/abRZV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ddcc33c6958954b71feef05f697002d7976d7e00c06e76f2b18011346577250c.exe

Files

ef1689effa59f856080516d8e9b5f76d.bin
.zip

Password: infected
ddcc33c6958954b71feef05f697002d7976d7e00c06e76f2b18011346577250c.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 253KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ