b89f6062d174e452d189ec4248af489c[.]bin | Triage

Sharing

General

Target

b89f6062d174e452d189ec4248af489c.bin
Size

627KB
MD5

0f0e83bf467585e2d6bf5f3f0a1a9436
SHA1

e02568650ab2c0bfc775cc29d4d0eec749f24aec
SHA256

5b563009a96636d555abb14ab182a6505f4cc44d95e788fba74809923292eb14
SHA512

f04d9775ef1ed4f958a455d30252939f893ef2a0429d3fbd8756945ec55e609c307d8dd3520ce52ca20f579cd0dab0a8342a84d2de51264def1ae4a234d86390
SSDEEP

12288:tZvmMVguNzvvLNUckb1FXvucHuJuQCdXUaAPZ4pKU0EK+BAjw3y4sx:zB9vvLpm1FWcOJBCRUakSpNjrBm1dx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/08a1a9925dfe42290e12823fa21cb53cd879fa1895011d2cfa41d1edeb464795.exe

Files

b89f6062d174e452d189ec4248af489c.bin
.zip

Password: infected
08a1a9925dfe42290e12823fa21cb53cd879fa1895011d2cfa41d1edeb464795.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 713KB - Virtual size: 713KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ