52dbf187bfca587ebea10ae40b169059[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52dbf187bfca587ebea10ae40b169059.bin
Size

601KB
MD5

cb94896121fb84f39a5df1a1ee22c7c4
SHA1

e1ef342e488a1114ba058dd466b7eaf61472d552
SHA256

98686020111559db66f399a838eae8e752ccec2f78ee7ad95e7ba38abc887c99
SHA512

6f6babb75ac092af42f443a0b945cebdb3cd81e66dd47d07b1cd844b1e4bd71b75c30ee69b2a850cb60f5e56f25b282e0797251954d59bb5ecbf9d97d30ffe49
SSDEEP

12288:d9BTXIaqdIcDXT+1lXYvVZAVsZ3eAfcfNN4OxGy70q2BUbhGF/j:fBC7mlovjOS3f0fkOxn0qyUbhGFr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/5d9a0c121c55de87c1950e12fcf124ed935f511080e05a87a72f07ea3d350ef7.exe

Files

52dbf187bfca587ebea10ae40b169059.bin
.zip

Password: infected
5d9a0c121c55de87c1950e12fcf124ed935f511080e05a87a72f07ea3d350ef7.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 909KB - Virtual size: 908KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ