6e62e68e7f2fa96e2cf9e973baa21505[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e62e68e7f2fa96e2cf9e973baa21505.bin
Size

10.8MB
MD5

85a8c30cfe6da95d066f52c4a4ff49e6
SHA1

314bbef970d3bb570e43d8984234ac7a9f658c0a
SHA256

ec49db7eb72edfe9c3ad9345768a0fb09e4a9aaad6fc22b49d1595fd86b8b047
SHA512

2c8738dcd21ae3753729ecd0cc2ae970b0b91e7ac3a8bdb6ef0bbd75dcaf6c2b78b1b1389ceab4298196e7df354480109d99c8edb5bc10375b2bcefcfaec9dfb
SSDEEP

196608:EuH74qXq1Gv7OEtxdRpX/WBLlI4v84DivIfD7XIJonugU5A/UWYx/XzyYobKXAir:/7PXqq/tFpX/HKWveAJ1UUWYxf2Yo+wS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/70df64d620fadd65a765aa364a9717436638a7b343f5ac42a90ae4ea8503c9ba.exe

Files

6e62e68e7f2fa96e2cf9e973baa21505.bin
.zip

Password: infected
70df64d620fadd65a765aa364a9717436638a7b343f5ac42a90ae4ea8503c9ba.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10.8MB - Virtual size: 10.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ