e5693e87e9b7e438f4246f80f13d0f5e[.]bin | Triage

Sharing

General

Target

e5693e87e9b7e438f4246f80f13d0f5e.bin
Size

3.9MB
MD5

e5693e87e9b7e438f4246f80f13d0f5e
SHA1

bfa226389fbeed4172d6c06dd9e5865c085945f0
SHA256

b9af457abc6a1ba8abf2b857847578b888964dfa671599985fe7649695a6cb60
SHA512

7cb5765cf7c60b9ab4ec96f600572ace3f93ba98cb899a05ad8d0ee7c62cba6c97f7308be4a7ea70bdc72225b127e2b67ae7b52b1fd53f3c33bb999670ad50d0
SSDEEP

98304:WbzczBM9Czp5+Yq501qQQS4pJ+02Ww/GJcBYX8QbvxLptP6FbKEqT:Wb4zjzKY/F4pJ2KJcBYsmxL76FbKEqT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e5693e87e9b7e438f4246f80f13d0f5e.bin

Files

e5693e87e9b7e438f4246f80f13d0f5e.bin
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Casis.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 313KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ