6a9b97d6916857f64d90084707de1e00[.]bin | Triage

Sharing

General

Target

6a9b97d6916857f64d90084707de1e00.bin
Size

664KB
MD5

d8894f57bfe3ba2b665d9def7741c71a
SHA1

940e457d7cdc65bc12ab290d2b9b7835289e27f0
SHA256

1f3ebaae5ba347663e2b868be40e1f46591e6d4cdabcb2bb3c0d22e12608e639
SHA512

0246ee7d378de9ac4cd036a2d25847c9fe0a053df8b85048006976aa6b496af8ce55864d9f6a0ef4d5b5d9185ed96239aa020ed0ce7920199f221278ff3347b5
SSDEEP

12288:SBre6MJS7shX9eTYJfSI3w9KNSSqh0Z3z9qHFKKMS+1dlFuuNSpgZJ:SBK5wHiDIfhcZqtMS+1dlFP6gZJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/2f1acdeff407a2ddcc16a30e5524e07cc543d45e0df27cc0d6da3722f0f7c998.exe

Files

6a9b97d6916857f64d90084707de1e00.bin
.zip

Password: infected
2f1acdeff407a2ddcc16a30e5524e07cc543d45e0df27cc0d6da3722f0f7c998.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

CeCi.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 670KB - Virtual size: 669KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ