fad205e206bc81d9a92a897e9fdf5b4a[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fad205e206bc81d9a92a897e9fdf5b4a.bin
Size

12KB
MD5

7fd7ce3511528e90603519f9eec0f717
SHA1

e415a54f8ecf0b52d7b44fbbee42999a87d44c91
SHA256

31dc7741ebe57e98ab6cc31861d8fb097171f5d3c87353c8a9133d862896730d
SHA512

70b02f02a4e7b96342f4b5e9200fafb0ef90f5e1694b05692f560a155f604630c9d8be153c89c7a8db3913b4e578b64a7b6fdf7acf40fb336c634500f7bfb39c
SSDEEP

384:TyIzKmUlVVVamdsn95b+iU176c3S5meUQNygYp:+cKBqmA5U76gPEfYp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2af98f9f107a9fbea618d9f65a9b12aa08726ac6956a6c39cf5afbaa0bb1f6fd.exe

Files

fad205e206bc81d9a92a897e9fdf5b4a.bin
.zip

Password: infected
2af98f9f107a9fbea618d9f65a9b12aa08726ac6956a6c39cf5afbaa0bb1f6fd.exe
.exe windows:4 windows x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ