6ffddfaa28979ea075045cd5a8d69cb2[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ffddfaa28979ea075045cd5a8d69cb2.bin
Size

210KB
MD5

7415fe37e6574cebbd1fea465aa0dbea
SHA1

746cbd32c72397f64eada89fb719b59f79ee33f0
SHA256

2d6defb4acd99010317ef6d0acba403c9f4afee51a3c84d42d7526435e886d4a
SHA512

f2d146e3394b9c6e62b1c64b98fc9a71332eb677a04aa9326fb312ca6a4ec584737341ccf650c909af55dd3ace9fcf7a1c4585a47f452b8af931eeaa4da32aac
SSDEEP

6144:EomH79KD+7Ioh1KbguhtNkWHOthnPtYpzz:EomH79CoGgsTSFYpzz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/df85d61e9523c0f3012f47049bec8c388f7bc8cf5e4daf4ead1f1f1ed0a60c64.exe

Files

6ffddfaa28979ea075045cd5a8d69cb2.bin
.zip

Password: infected
df85d61e9523c0f3012f47049bec8c388f7bc8cf5e4daf4ead1f1f1ed0a60c64.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\wj5ph8a54gl6\obj\Release\Beyound.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 211KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ