699e3affc886e4d354de82b9c2898c2b[.]bin | Triage

Sharing

General

Target

699e3affc886e4d354de82b9c2898c2b.bin
Size

633KB
MD5

42d74be9e2735c668ff418c260419904
SHA1

af73fb9550bd7a73e3c67cb71cdfea095dd8939a
SHA256

ceea139ce0e9ff736e56badba4426d64a64e4922db1730864a176513a6adee85
SHA512

9e70d35fe34f37f34d5b453e5faf003ea29427c43bdf24521d4ce30dc7d08bc14e1a4d3b2100f45c5864cf1b253d1041b77d5cc572b8652ddaf853fe715a1456
SSDEEP

12288:kl0p5+crfIbUEvvXz2YahSOWcaSh/r0+2uT1Ee2xjuQk6KIWDjMm08Md/:kl0bdfkHzm4OWcaSh/g+lEeCLKIaU8k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/715dd87ef7b32eca897087684aa5267e6284460b8bbb1a8f03e50ae1b0cacd85.exe

Files

699e3affc886e4d354de82b9c2898c2b.bin
.zip

Password: infected
715dd87ef7b32eca897087684aa5267e6284460b8bbb1a8f03e50ae1b0cacd85.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 688KB - Virtual size: 687KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ