fb545037ab489bdbe428559235a61cee[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb545037ab489bdbe428559235a61cee.bin
Size

4.4MB
MD5

ca23b1e9977e45dc084e4a475997d3e5
SHA1

bc881b3eddcf2871d313f51f3cd92341b6ed71fd
SHA256

ec48a51e6b403fc7c0fffbd6cc7fc496449700b92e0ee9bd953915b0d0b5800e
SHA512

68eb3a4aea7c65be3468fee767c47500fdca9c801fb8c0e2a08607815b3cab056fa5deaf4e3eb5cf4adadb38d03e14992104521616c4ef7b2aa4f03b409dfbd9
SSDEEP

98304:40+27QGlj17VQ/Zbnu29sXbZHnRP7zSkNE0Zu2KhjgX:WeTV8pdcbZHRnh1jKhjgX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7da786b32ec861208fc6a01b94d4eee4867b26dabfe214b66c9009b2f0222050.exe

Files

fb545037ab489bdbe428559235a61cee.bin
.zip

Password: infected
7da786b32ec861208fc6a01b94d4eee4867b26dabfe214b66c9009b2f0222050.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ