6d00e5218837d91e1aba57a03c3e7a16[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d00e5218837d91e1aba57a03c3e7a16.bin
Size

11KB
MD5

4484ead577ce5a40d287dcbbd5c15b3c
SHA1

46f4e517558b7c7852de1617fbb6a90f0889e368
SHA256

7547bfd29534b4a6969bee6cffd6ba41411b146eb8ea19cade6c138436214f73
SHA512

cc472d06b31efb72f6bb4d672d56caf383e39eba067dcf48b6ce7c917db63994fa59ed7e86a3a10600b66800e54b788fb4501f665d9cfb119e36b318e64b9f36
SSDEEP

192:ccgnQBYmpBxIwJZMhPdx3bxldzyC8ZNhKzRIVK6I04WSUv94zzP84zSZgnJ2UHqC:ZgnQBYmdIwEhj3HQC8ZWVDLVy2EJqnJ9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/09990d84f1d9b34158110c59adba6354a9c2f1d96c977e6bab91c24fe127cb03.exe

Files

6d00e5218837d91e1aba57a03c3e7a16.bin
.zip

Password: infected
09990d84f1d9b34158110c59adba6354a9c2f1d96c977e6bab91c24fe127cb03.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\_RU\WeAreChmnet\WeGonnaDOIT\obj\Debug\WeGonnaDOIT.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ