7394bb81fdfc9bfb8152c08fe67d6ebf[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7394bb81fdfc9bfb8152c08fe67d6ebf.bin
Size

680KB
MD5

ff95ba42a3fddc0c90765884266de16a
SHA1

a49ac4ca62a702228c2ace4e53ce8f582268b6bf
SHA256

4dd0126bf4f31bbf050df20388845aa3f82a072ec6c92ac4a7ca4d77ad9c0785
SHA512

c68c6d6407fae2bd60f20450655604e1103dca64ff58d62b44bbe4ea119da9af3fe67418871a448d1a462ca05cf6bf45d1c1b03af08b7e850c17bc17bdca8183
SSDEEP

12288:E5eWbGqX4tVtfnL7hTvoX6HyM0SHNJGWl22+RBZfu1v14oVI+Qcz6n73XluxmBM2:E5eWbGq8tfL7hrKm9N922YrW1tnI+DO9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7bafa813f159b438a71e66807044f9f606ab45f5aca3e6d29209e6083d4fc5e7.exe

Files

7394bb81fdfc9bfb8152c08fe67d6ebf.bin
.zip

Password: infected
7bafa813f159b438a71e66807044f9f606ab45f5aca3e6d29209e6083d4fc5e7.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

hyik.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 730KB - Virtual size: 730KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ