6aef5f1931bd1407f891b037b994414e[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6aef5f1931bd1407f891b037b994414e.bin
Size

526KB
MD5

a9d7cc4328c0a834982afe584f693b7c
SHA1

8c37269593bff92cd755b7e4df9285c5b74ed675
SHA256

ee42c81da62598cd3f7874dd13ba4c0fa608b8fb5281569b00a05f250f28f4f3
SHA512

81b87b039f837fa960b19a80fd52c6c60d0535d2c8d623281568a708c8874f42b8be123ee0559c3c86eb442ca64ed46bdfdd5f4ce9d1ce5f45375eb36f3ea735
SSDEEP

12288:pesrmr6x/m6rfZ4n1yflpv/uy+Dsl9xtZxf/nCpQprIA6z:pesrw6x/m6bZfvGywsdtzCupw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3510d84f8b7c07db80eaf1f190ff3727c3ae95921cab2d308a711b1e14f62099.exe

Files

6aef5f1931bd1407f891b037b994414e.bin
.zip

Password: infected
3510d84f8b7c07db80eaf1f190ff3727c3ae95921cab2d308a711b1e14f62099.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 589KB - Virtual size: 588KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ