f6e5e2b98b02e12eb69ca996a0c2c8cb[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6e5e2b98b02e12eb69ca996a0c2c8cb.bin
Size

341KB
MD5

364b42508597c238fd84e68a3465b4b1
SHA1

786e6c5ec7b595e584d5c9123243acdc6ccd994b
SHA256

c10ef69e7225e00c8e66b67ed2cd38922084767d47de3c494a2190edb31f2177
SHA512

8520b3bd497a26a20e8d27723dc4b0ab43155ae6edf081ac0fbfd537ed38e2a9e9c9a1261b6560c30015b852563b005b7cf0d6c148f6780fd4692117aebeab87
SSDEEP

6144:7UNpS/9lh13jJX0ZFPXn6bHueOEi4rptyOEGmR4iRHvEiQh34NztY+8z0CIRkN3T:7WS/9P13jJX0ZFPn67OEpr29RRRH8iQn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4fb58a5ee7ba44f8b9383496178c47aa4b47a304c128c403939bf0bf9aeb7b4b.exe

Files

f6e5e2b98b02e12eb69ca996a0c2c8cb.bin
.zip

Password: infected
4fb58a5ee7ba44f8b9383496178c47aa4b47a304c128c403939bf0bf9aeb7b4b.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 811KB - Virtual size: 810KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ