e6da90f18dfb7deccffa9891b377cae0[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e6da90f18dfb7deccffa9891b377cae0.bin
Size

748KB
MD5

3de65345e6caf4da16493c586d40fc7f
SHA1

5966a319f9bc69dc5d48c8977582b37a3ef23384
SHA256

57bfc8f77465a5b10798bd1d90879de3673e2307edd154598019edba6e7b0ba2
SHA512

5d17834b50fad32544dbfdd8ff87f5650c3d1599865beecf61436afe3d01ebf649c5b0deb85a60bef7d78955ef09cdfb16cbf7ec080fe7f6700591c22eea95d3
SSDEEP

12288:wvXWhVIoYEXgwQLO/Dh6gCwZlSecDEIX6xhGSEoOlEwM3GtY5IAOi7+QU:wPUblQwn/DhBZ8ec4u6xhN5jctYj3Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a725162020873c30288047a60ac4fbe92f96e4393ec7b6cf36a38fd0eeb0e25f.exe

Files

e6da90f18dfb7deccffa9891b377cae0.bin
.zip

Password: infected
a725162020873c30288047a60ac4fbe92f96e4393ec7b6cf36a38fd0eeb0e25f.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

uSQz.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1003KB - Virtual size: 1003KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ