f3efcd5366e2b5843f89b0b40900f8a5[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3efcd5366e2b5843f89b0b40900f8a5.bin
Size

639KB
MD5

105ecca61f563fe546295fcc8567b068
SHA1

a170b06427e58b95a3fd8f3ce5280e2598809062
SHA256

80a4d5f383dac844ef0e920a32f83c0023b5701da746ef141aaf04153330d250
SHA512

01ee0f92a22ac691024f10e192b8e0afb0032fe560894ebe254d66cf393648685c827eec1d5a4b3cf57b62c77fe5fc187e6f7b112060cbc91d75d8eed48738c0
SSDEEP

12288:izl7W3PJ3KcAdqIU9LeiLSRTJoC+300XT/1vMY7AMrLCYol3MbfOqFAmCBBMZ:AWPJ3Kc95p92F50D17AwLCp2f7FAtM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/9f3330ef95e0cb6c1926d216d4a4662cd1c9265f3559ee8121a39bdcc2e957bd.exe

Files

f3efcd5366e2b5843f89b0b40900f8a5.bin
.zip

Password: infected
9f3330ef95e0cb6c1926d216d4a4662cd1c9265f3559ee8121a39bdcc2e957bd.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 640KB - Virtual size: 639KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ