28b70eb9e22d27202d89dafb391aa0eb[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28b70eb9e22d27202d89dafb391aa0eb.bin
Size

15.4MB
MD5

976e97f4ec2563763a25d5cfddfa9693
SHA1

94fdf122971a802d65bfe2296030e3e39e617ab6
SHA256

b9c32a896c38e583fe2a4efde17ffea63c0eba881b331526b1748030840df7b6
SHA512

96a56bd13b9e1a011ab317c6f27b70d717cc54df6ecd0d7134dd1762980356fce9cf650bc28ad0b4474e4b964c7d07b51b0fadb730699c6cd5964b6c17f64724
SSDEEP

393216:0iW0RKOfMStc/ves7YtaO4yMCA6Q0xgXbdeQtF:0T92zc/ves7PRHCAlAgXh/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6b7c518e5ffa0f2392de3d5fe66049d230195a53993a73bab8fffae3cb4e17dc.exe

Files

28b70eb9e22d27202d89dafb391aa0eb.bin
.zip

Password: infected
6b7c518e5ffa0f2392de3d5fe66049d230195a53993a73bab8fffae3cb4e17dc.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15.4MB - Virtual size: 15.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ