91181ab80e0f828910908cb623f59430[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

91181ab80e0f828910908cb623f59430.bin
Size

1.1MB
MD5

7f6ccbf06ebf74b332e9e6cd153640bc
SHA1

c07c9dc589b464092aa84c43c5daf0eb2b1cee66
SHA256

3f730d16ad12063bece4e08222286029c5150a61de715cf7e024ea33982e9b96
SHA512

61f7bd7deb4103ca2818f7deeca24f3c87c3881744354150ab23517250752cbb0c3cb1f118fd95382f229820752dfb9dd045745858b85f4df46eb10a7d0f85e8
SSDEEP

24576:PeydzQ/mKMHWeuiOuk8zGT0/zfg7Nu1GdJgyn+ze1BCUtl+GfACp:Pey6OxbObLT07fX18TJdNd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/5805ba05b4054885a03cfcfaa9a114a9779f588ed93f2ca4ba7a0398645434de.exe

Files

91181ab80e0f828910908cb623f59430.bin
.zip

Password: infected
5805ba05b4054885a03cfcfaa9a114a9779f588ed93f2ca4ba7a0398645434de.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ