5b9ceef22111f9ec198bf344d83234a7[.]bin | Triage

Sharing

General

Target

5b9ceef22111f9ec198bf344d83234a7.bin
Size

688KB
MD5

b11863d8c19efdbea114e07f2c551779
SHA1

b3a3a658507f0bf58a06f7982582154c78e6b0e6
SHA256

7a24eccdf4b1f9449e4cdd5d44ffa33f3938d2e60951c966b3ef615400c62630
SHA512

fb88a17d1ee58c26864834e4ac9d01001f595c6e46ab5b9455fcdd22dbc9e1fde8921b4b005ba899b6f8db0cc60403e31bf45786b493f5d0921e70b303e8496f
SSDEEP

12288:l/aT1ujoNeqd90t6YDNUx+fDNT06otvuoRP0rjjFu/turaj5yHG:l/aT1ujO0t5NU+f5EMjxUtefG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/bd78ecae205703d7efa045dfd85bd9e73854fc19ed71ce8acb8d1342ef083bcf.exe

Files

5b9ceef22111f9ec198bf344d83234a7.bin
.zip

Password: infected
bd78ecae205703d7efa045dfd85bd9e73854fc19ed71ce8acb8d1342ef083bcf.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 745KB - Virtual size: 745KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ