6b95c035445735c11db327f763177c66[.]bin | Triage

Sharing

General

Target

6b95c035445735c11db327f763177c66.bin
Size

381KB
MD5

248e80e3d2dfb784fde626c92648e66e
SHA1

38c23c4fcf7ae10210396c454398b1a52f9bfd9b
SHA256

ce7fe275dadb04e2b8065fbeffac933658ac8429829280447c9ce07751128f69
SHA512

daa1f7a2816512de294250367cc0c016a42aab64e06cb46efdae136555906bd5ce59fc2af3ed13a07f1be21ef2efc5a5a107de6a96dbf5aa01f6acf901a2c911
SSDEEP

6144:lnNgVAUhdxuoKtvFm+uAj+v5Vn5+Zno9iI+S0elisRvhth4LC7aXpcVq4gHP26/7:ZaVddxTSykw0edvzh+C7aXpc+O6/xt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/94f41b10238cb779f5362938093c577bcb1ed8ab3b4dec75b48ad735807072c2.exe

Files

6b95c035445735c11db327f763177c66.bin
.zip

Password: infected
94f41b10238cb779f5362938093c577bcb1ed8ab3b4dec75b48ad735807072c2.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 338KB - Virtual size: 338KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ