f7007e5d3b1d6c2833ef79b69dfe6542[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7007e5d3b1d6c2833ef79b69dfe6542.bin
Size

618KB
MD5

45633fa6f788a3f3a1f12659de998870
SHA1

b301eb636a167e299046bebba11c8acabda3e293
SHA256

f79234e19de260f4a2bae340b627e79c3aec97ee0911e1af514bcc7c30ad14c5
SHA512

465c3def9fc9f3b11242ebd5b4faa5d16bcf3b44c7a19dbaf2132732c082292bd02ea83c5e119725a6c5067842f2054076832bdd1336f460e4a8f9bfcb32c7e2
SSDEEP

12288:ufYHG4UJ80XrLPd/nQfnZkhL8CV4xl/MnUqAcDHCHRCv046t/Li9K0zpDx2t:C4UJ8yrZofnih8CV4jkUqfHCxd4++k2Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/84b5e1b2883149321ba59ca2179d8ee2190a5d335cb6f15c5c4285dff78acefa.exe

Files

f7007e5d3b1d6c2833ef79b69dfe6542.bin
.zip

Password: infected
84b5e1b2883149321ba59ca2179d8ee2190a5d335cb6f15c5c4285dff78acefa.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wAfHcxb.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 675KB - Virtual size: 674KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ