fa9c5a7ad1631bc290f8d8452a85c136[.]bin | Triage

Sharing

General

Target

fa9c5a7ad1631bc290f8d8452a85c136.bin
Size

661KB
MD5

b29c836cf705cbfbca0d9dc5d71e0f68
SHA1

4e437685fbec3382ce8e6341d5047edb396f9a77
SHA256

aef6f244834e60f25ad270640e74a37f69763d25e4f06c9c0565b446d886e100
SHA512

f291e431e71922ff66589a2c60bc2bea0d3658cbf1f982d45aa43aa250e2a6704518574a84f9972cd5f1a138da3898ae0b7173418689a97d4f8a1a9f7aa97a92
SSDEEP

12288:uA88BhRJQuiMVpL9fFNzpGgiFbeaqxAZ2gVq5jjI9JFiu+Pn2RuLB8DDF69:ucvi2hZhvm2gA5jjyJP+P2U+69

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/5996710a9365b9abba29c8640afaf2e8f2e18270f782319265e8e5a16e8c28af.exe

Files

fa9c5a7ad1631bc290f8d8452a85c136.bin
.zip

Password: infected
5996710a9365b9abba29c8640afaf2e8f2e18270f782319265e8e5a16e8c28af.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

zkcw.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 681KB - Virtual size: 680KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ