fa85e1ebb8851f969c4e99d35264890d[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa85e1ebb8851f969c4e99d35264890d.bin
Size

628KB
MD5

c1d9376fb809bd6c7fce3da4247e9b03
SHA1

4fd8e106c4a8a59b271882a55eec2d0015722175
SHA256

8cf37f63635794594920fea7dee7bdcba9b95617c40cdb650439ed7fc80462c5
SHA512

6bf73ebae5d4aa19466a2eb0af3a6a749651f5af2f5dce5dce179816220958f16f2bf12b2a64b43354d9f4ff58e29edd415cc4bb195d92edfba6ae8041c662a2
SSDEEP

12288:enRsKmxwmWJE/Er61fh7LL3CaHvTiWIweuRGtDhy0xvxB/XeW:enRsKmxwkEu7XFiW1RGtD95Hvn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a1018f6e1828a26fe95f6a0c4ef3b1b55b13966fbfd11fecc41a1b295457253c.exe

Files

fa85e1ebb8851f969c4e99d35264890d.bin
.zip

Password: infected
a1018f6e1828a26fe95f6a0c4ef3b1b55b13966fbfd11fecc41a1b295457253c.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 709KB - Virtual size: 708KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ