b4c236405fde2d29e8fcf24c4dbe8e1c[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4c236405fde2d29e8fcf24c4dbe8e1c.bin
Size

710KB
MD5

530a8189c7791cd943003b7c8f96d813
SHA1

275f48d4fe3eec5a14014fad6a7d801b5da8ebc1
SHA256

edb52184a12ead8739b66475e7f3e4e30e91eb455d8d1f1025c286296972e6be
SHA512

c2e2b41b1530b64f7bb7970d7c8aa918e7a19d0eb6bfa866559f961516778ef39d36aca6c95c52d55964c7138294a6f1295a2463dbe8e782ede160e10074e7fe
SSDEEP

12288:hzLfQtN/jkR9wkOKls7Qrxb0+TUQ41oPH3iUHOd+QV65kl9ULZ4Q+9dOvNzvL2ZD:dfQtFKZlTux5yPyUHTQVheL+qvNzD2D1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/85346857515bcff04f4ec8aa4b906e12eff6073de9273d99113621cd30cce659.exe

Files

b4c236405fde2d29e8fcf24c4dbe8e1c.bin
.zip

Password: infected
85346857515bcff04f4ec8aa4b906e12eff6073de9273d99113621cd30cce659.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 831KB - Virtual size: 830KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ