5e1b9e9a79b8b11e1805a06bb61e7961[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e1b9e9a79b8b11e1805a06bb61e7961.bin
Size

630KB
MD5

e95c8d13d0bfa18e8fa9e5a4e346cf41
SHA1

69ccf5b5ec8fcd2750bc623f2fa22294ed8f372e
SHA256

ab592b4701877e9bab21a9e572cb933c4555e00a35bf905c8f3137f98b001f66
SHA512

226fafcd7775bdb6633c7c9031098694240fc7dd45bb972a27d3a22916f88240f5b9c1bb59bca51a876c0a43e442b643e5162074356b2a680434d059664ecc62
SSDEEP

12288:72wBPnJB/LkE5s4A4ArvLkzxzyZInOh0dnKbWvEWQDUSvtjdS8/:7TNzkAtAzTcGZInOMn0WvEWQ548/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/21dc047f9ab94825e801f1459225100c58e688396b570318cc50fe8f53dfc66b.exe

Files

5e1b9e9a79b8b11e1805a06bb61e7961.bin
.zip

Password: infected
21dc047f9ab94825e801f1459225100c58e688396b570318cc50fe8f53dfc66b.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 737KB - Virtual size: 737KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ