6da3bf5e8eedc21810eec69031cd08b2[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6da3bf5e8eedc21810eec69031cd08b2.bin
Size

15.6MB
MD5

7967be2fedc18e121a57e6baf577b321
SHA1

9dcecf98ea33fc7cef097f5c596ce6041e137be8
SHA256

2e3703687ac4412fb3285b4c2a6ba2e62487ea273d9540b31a5b254fd690e251
SHA512

59c54bf2e2d6f64494cf119686294ee2b07ae241960d3d71783469ab9ff70661d34578b52dbf8444f9c161092d742e3331b3c337a07ede80ac0e6b7559ef992e
SSDEEP

393216:yg3WWYa5q6iVv3BaCVTjEITOpLGuhW0YjGbZ/CA1+I/:Ya5qJ13jXEIoiu9FbFCU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4eabb95ac9e86f96dfc6489a64b98b736189c100f9328210e18197ac89b1e63d.exe

Files

6da3bf5e8eedc21810eec69031cd08b2.bin
.zip

Password: infected
4eabb95ac9e86f96dfc6489a64b98b736189c100f9328210e18197ac89b1e63d.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15.6MB - Virtual size: 15.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ