f59ff065a3c18cbd5da53ceea337967f[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f59ff065a3c18cbd5da53ceea337967f.bin
Size

612KB
MD5

1d1e15fec59e041aa80648c085c9576d
SHA1

46c315f0136e2c99f206543481a176445d46f688
SHA256

e3286e1e7d619fa18475d355fbd0a130561004c3c011ebe4cfffe057df3cb334
SHA512

4ffb7574cea1012f085b4c16e441a3e279612ff9ade505c6f54ae5570b4aec83fa574aa18758d668ddd7839a8487e4f3656d248937d13531cb3196dc5cca57fa
SSDEEP

12288:DUsKw/P4FTw5N+2XBUe26hTIZaew6XRTRYq1ysim4zyOXUWIqk2Ko:PKSgF/wPhTwjRNYKimDeIc5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2cc91aca07118474798c2daad4fc680b057db86e4dca2201da9791a24f53181b.exe

Files

f59ff065a3c18cbd5da53ceea337967f.bin
.zip

Password: infected
2cc91aca07118474798c2daad4fc680b057db86e4dca2201da9791a24f53181b.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 872KB - Virtual size: 872KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ