75ff3413e3bf74b7cefe8ab14e43ca96[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75ff3413e3bf74b7cefe8ab14e43ca96.bin
Size

12.3MB
MD5

21f3e29c13bcd8a77bf80cd2096e1c94
SHA1

081adfbea126bdeb154a307f733dab6e02ea5254
SHA256

91d5df031ff7d3a2a25ec3402e2d09649508c35627bc7629ed78ada37b8c9f32
SHA512

c1dcbd7bb39c70ff937a577e1c2204e85e491773fcad75c6d2b05eaccb76558ce89bf00ff40636b5e31b176df8e3c7ccc10d125a2c9d9ce680c1de163d26f472
SSDEEP

196608:lfBTuyHSXBlJ2xzrVfoNDmKhnFm9RgLCzM2U+J0ptikL5hsbOvHRgekeJD:ltb6lJAfwDmMnFmX/UI0Wk1ubsOleJD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f58add586ed2fd30ffc10eff51f55f859eff1e7870743d46a5cfdc7b76a5e308.exe

Files

75ff3413e3bf74b7cefe8ab14e43ca96.bin
.zip

Password: infected
f58add586ed2fd30ffc10eff51f55f859eff1e7870743d46a5cfdc7b76a5e308.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12.3MB - Virtual size: 12.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ