56e8402d0a1e55ebf85b38aab8fdcee1[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56e8402d0a1e55ebf85b38aab8fdcee1.bin
Size

507KB
MD5

c8f29f6b029d50023d88f105159d71f1
SHA1

2f1666e275651d88311573e67b1bd547ff4fe754
SHA256

e6648b42ce02b3ae9da6a901943a2e5bd3d96c8efd79561a3b3a6e1a33cf8fbe
SHA512

249e76dc120181237dece5b5f45d964c921a63dacf32b015d0b7e5b57edd3f50b9bd33b8cd9010476f362e39cbf2cfc101c395b40b4dd57cf675beabe592479c
SSDEEP

12288:lH4yJA/1yCzYpRp957bKCY06eCt1lDzAK/HAcmcusLzbN:B4iCzeRpKC5U1NA8AcZz5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7c8df85e9bea7559e0addd33afc5273e49eb863c4c15f6c4c7d3fbae3eb3c55c.exe

Files

56e8402d0a1e55ebf85b38aab8fdcee1.bin
.zip

Password: infected
7c8df85e9bea7559e0addd33afc5273e49eb863c4c15f6c4c7d3fbae3eb3c55c.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 516KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ