6d7ce4b27687c6991eb31fa87481c99d[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d7ce4b27687c6991eb31fa87481c99d.bin
Size

4.4MB
MD5

f03d96d69d0537e3dd59e6116789ea24
SHA1

9363a8e86bcf0ef0aeeccb6aa503e83fa7991c0a
SHA256

35736867ceec26f7f334f6e2741e75ca58e77aa00ca8a9a5354d229944d85bec
SHA512

836ea587fb9f501dc73a8b8640dabf1ee92138ca39e9405f533dadde935daebcdd201b0c45176c43d0bb40d991c2581a17c5ef2e67ce59b33c7b444c082fa1ba
SSDEEP

98304:NNueTUgEw3nwlTt/49wTUe9R/58dunqkqIVqEcD:GCEw3h6awnR9E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a0b01f56081b68bc18bd205504d6ab8b38e5f722e5a2570d5f530c74c26f3ea1.exe

Files

6d7ce4b27687c6991eb31fa87481c99d.bin
.zip

Password: infected
a0b01f56081b68bc18bd205504d6ab8b38e5f722e5a2570d5f530c74c26f3ea1.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.0MB - Virtual size: 7.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ