b52185211eed1161a992e553024f2991[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b52185211eed1161a992e553024f2991.bin
Size

119KB
MD5

916e579c41aa2dc6149d67719a0eab35
SHA1

0516a116dcf778fd17a7cd2984caf487432b10fe
SHA256

2f982c71bc96c4d7a7b3e1859b2fc79c4cc89a18cdd611e5c7f113c3517995d9
SHA512

664fa88bba380fa728eee86e16fa1770214a20e874926724b08e301666c2da58c683afcaa0831dc87e2a2e6fd259bddfee58c97bbabcd2afc1a1086920a78b46
SSDEEP

3072:69wiEpncpsmz5Sdi9ZmTgodAosYqbjt/P6GpPtKHaTJrU0XGXgUiynAkK1:69wupsmUUi1dkYyZ/PLPTXXqg+AkK1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f3e2d897965b2b0eda1d50c2d272a663d8e1d7a12c95d9fc92a7c45f634e117a.exe

Files

b52185211eed1161a992e553024f2991.bin
.zip

Password: infected
f3e2d897965b2b0eda1d50c2d272a663d8e1d7a12c95d9fc92a7c45f634e117a.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ