5238fbf72ac6be4edfb03daaceca338c[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5238fbf72ac6be4edfb03daaceca338c.bin
Size

638KB
MD5

eee883c63afea7134f7f2e9f2cc359bd
SHA1

55bd983f213e4ac148eef53ca5a1fe7d111754c3
SHA256

fb076b1ae4ae0b5b75219d0f418fcd87a9801d23f017405f19fa90c03812ca3b
SHA512

c9aa835aee2e444fc3b3afe706156df693a6a1864cd2a983abf11bd2cbec34ab56de94e247862e2ad89911363ac0f9fd547072a7ae0a9acdde1e2ffce5268cdd
SSDEEP

12288:rMMHd4lGBtssKFCkBM5G5V4yrW/AlgPA19ngPi7zbN5V6iMxKC/6:rrd4gYgG5VnrW/AgPAX5Jn6iMsCC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/b19de61d027c066c42afa7cfa6b81c26792d310d07bfb38481deb842796de3dc.exe

Files

5238fbf72ac6be4edfb03daaceca338c.bin
.zip

Password: infected
b19de61d027c066c42afa7cfa6b81c26792d310d07bfb38481deb842796de3dc.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 672KB - Virtual size: 671KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ