f85ac4fc2e66845cfb24fe3d8a6b8462[.]bin | Triage

Sharing

General

Target

f85ac4fc2e66845cfb24fe3d8a6b8462.bin
Size

581KB
MD5

af45ace39b3008f5ff3da0be2ee93fd6
SHA1

7420ff739a3779ab60d838f423437122d1116c42
SHA256

b33234b1e183542437ec85909253c8fcbdd5e2be9b4bcd6907aae1fa2f5494a3
SHA512

bc9688c15d2463f5c83fbe7c6c097bbac5522b7f5c7d607ee62238d8ed3ec8653bfb069e6d33a4b22681fa1207edb28bb4eceee18858e730aaf9da9609340661
SSDEEP

12288:7lwaJPmv35OXIyPr2Ol6l74w8thQbRqLeeHWRdUiCctqahB:7DmxOXDrb6MwGezeHFi4ahB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/b76cd92e2380c9ec5e1a860030409898e27a285120dd14c70d279dc82b3b15e8.exe

Files

f85ac4fc2e66845cfb24fe3d8a6b8462.bin
.zip

Password: infected
b76cd92e2380c9ec5e1a860030409898e27a285120dd14c70d279dc82b3b15e8.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 730KB - Virtual size: 730KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ