bb890594548df51e5957ca2445cd7fb8[.]bin | Triage

Sharing

General

Target

bb890594548df51e5957ca2445cd7fb8.bin
Size

597KB
MD5

2c836451deb001b9011bf6b753c5f1b1
SHA1

a22a5521ee85f4e246e9618642c840fc3d898667
SHA256

62e74181295241e8e8b3ca0cff70a1f5044aa82aab8df781dbb22f56eccd32cd
SHA512

c45696ac264b8170fbcaff8c16c99919951f840f43abd983c6d70c14e46ee2633c3d096ae285178700c2bb4cfa450c8d1f2f6ff445cc9c7416899521db8a4610
SSDEEP

12288:R0C44yG1y9VzIvbxQLFPDV1aYsQVpXAxMONXY9NA0ycBgG4uT6igSsJf:R0C4Y1MMv2LF51aSVpbRJyBuxSf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/ce021aaca1ac091165c6bd6d9b27d41c0994d308f39bce54a5d7e59ba76a421e.exe

Files

bb890594548df51e5957ca2445cd7fb8.bin
.zip

Password: infected
ce021aaca1ac091165c6bd6d9b27d41c0994d308f39bce54a5d7e59ba76a421e.exe
.exe windows:4 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Windows\Containers\Confidential\DotnetGenerator\Stub\Projects\Fallkyriya\obj\Release\Fallkyriya.pdb

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ