f531e877860d55c756fb1ef584d1ed8a[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f531e877860d55c756fb1ef584d1ed8a.bin
Size

979KB
MD5

35c80c8393bd3f7f3b7345c61dd21d6b
SHA1

fc2ae5615a88877b59f0af4e6a94579c2e70a5e4
SHA256

b8c3ff5e368c1e11a4cd9b9f76fada25f740e6d0ca7acd5a75440cb75aab8dcd
SHA512

66e060e9effca85616098afe1c11aaf46c171fe7c6b14b0e630d362d1e124da2642da9e5c8519e42b92989eb640287e82f2245b81cb1d0b5275289c0ff87f53f
SSDEEP

24576:HvJOdWInr6ZXKmf0baMRdiOPwX8cK1ZMXZ6n:HcWMr6B0iO4k1GZ6n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/8817121972c8d15861d1b458c7997f308458004b22e0704e1fc312e6253b0c15.exe

Files

f531e877860d55c756fb1ef584d1ed8a.bin
.zip

Password: infected
8817121972c8d15861d1b458c7997f308458004b22e0704e1fc312e6253b0c15.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

aD^9
Size: 910KB - Virtual size: 909KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ