ba86bf37eeedd179fd3054505dc5f37a[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba86bf37eeedd179fd3054505dc5f37a.bin
Size

663KB
MD5

c7a0c99dc46ccebd8efcdea5e7f7c9c0
SHA1

f61f12edea26e63a9e4f696106d256b00dc4b71a
SHA256

e10644a3b1f9c5798b7e2bb7924f33ea48b0113228016154234de4c2ce257040
SHA512

8d15776617844e883b13725c2f4d6272c9376b82674a291af637381a3913a0c04fda04df24ee29ec66cad4b0fc5a1b5834d6c9d3a4a222f56786aca77a1e2e89
SSDEEP

12288:vj+uTFd6Rhp6EWE9qEaT/rToW5F8QA+eraVlHJSlDPDD3OidWvXY4dzYurGf2:P6RhIUiToWbrR+i9vXlhYT2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4a1c28982ac39eda41aba335f5b3f52c3cbb6e8a41e4dda3c429ec6eef2f4b48.exe

Files

ba86bf37eeedd179fd3054505dc5f37a.bin
.zip

Password: infected
4a1c28982ac39eda41aba335f5b3f52c3cbb6e8a41e4dda3c429ec6eef2f4b48.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 708KB - Virtual size: 706KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ