6158e12a373856931a3fd880211fbf14[.]bin | Triage

Sharing

General

Target

6158e12a373856931a3fd880211fbf14.bin
Size

453KB
MD5

ded708a2a3e5edda502b6040d7567ce7
SHA1

084d43222c4c1922ed3a4753633a8b5dd3c94106
SHA256

320478e568f73002ac6aeb3b80192a9b1c95ece1697c67c8fa920830dadfe87f
SHA512

1ac194c9749830c4265dce4ebb51f28367579ae0c6f805bd3b388da68f3e711a3ef94cc53d7820f1e58a2ac4acd29cf0743d62033e8e44c5ede2988590902681
SSDEEP

12288:reW4vlBHYaIC8Bhf9h28c8CnItc4xm6PHor9G:reXYCditc3s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a1d31e78ec31ebd8728ff0a689bb396b93781f8cb548cac639019531db2adb36.exe

Files

6158e12a373856931a3fd880211fbf14.bin
.zip

Password: infected
a1d31e78ec31ebd8728ff0a689bb396b93781f8cb548cac639019531db2adb36.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 470KB - Virtual size: 470KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ