1eac408f61ea7a336c934476f8597c58[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1eac408f61ea7a336c934476f8597c58.bin
Size

452KB
MD5

554b537a311b0e8603818976bf23f257
SHA1

8825ae960fbb193042ee45a92870490079ab9af5
SHA256

3ce9dabad47188b860640faa43f0ff169dd6c1b4f3d780b8bab4ff8f7f7176e8
SHA512

586df6d5e92b0f9f1abe2dd6d4c293641d879fa1c145af0dba0b4a546ae4e212783284c1ae1dca051ff084c2ee3135f434f1bd4f77a2af75a112c58d79d629a5
SSDEEP

6144:PIGcnsw/SbkxLoobBBcWKLKX2wTrqu5z2OI9Hm5Iydwu5vanDlnraSzPgyP6qVyd:wTswFxLoobInuX2wTrvx2H3yyuswyEOs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6c040340e398600d3f192f83b9cdb219171108c5d7d8ca14813fa48d326d1a8b.exe

Files

1eac408f61ea7a336c934476f8597c58.bin
.zip

Password: infected
6c040340e398600d3f192f83b9cdb219171108c5d7d8ca14813fa48d326d1a8b.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 470KB - Virtual size: 469KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ