fe7a1b19cee84c4dc4eeed17ce8f8b42[.]bin | Triage

Sharing

General

Target

fe7a1b19cee84c4dc4eeed17ce8f8b42.bin
Size

570KB
MD5

2b58490bcdfe45854c213ff2a7ad0c5e
SHA1

c7b35c0e41257f53b869a7ddaf08c6474b7b0a11
SHA256

2b51ef2986498ea6143c12f3e7541ae89fd1867035f8199a65e15184383c6323
SHA512

5ece97bfa4d9d246cee4c971cd41bfbed67cdc3485424a283590ee0342ceec467be280beb29d40c77eb891028a9f7cf9a8dd843e439c2941b3b3b37fb311d60e
SSDEEP

12288:e/DREM7osnnw1PBeJO5gA+6FoR1GeGShUPzN0UJDHHKgkeMUrueyxKLoeU:0DREM7JnsPBeJbAl+K1JDHHBEU1UzeU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c107d4cc003e96086be97b02304631459e7b4ef3038fd6716ab583efe60dc964.exe

Files

fe7a1b19cee84c4dc4eeed17ce8f8b42.bin
.zip

Password: infected
c107d4cc003e96086be97b02304631459e7b4ef3038fd6716ab583efe60dc964.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 585KB - Virtual size: 585KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ